last executing test programs:

1m28.157743572s ago: executing program 2 (id=452):
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
write(0xffffffffffffffff, &(0x7f0000000000), 0x0)
sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYRES32=r0, @ANYBLOB="b8dd91dbd41f9218543556d50d62dd3c32eaaf1442f2b4f4d05475c6535cda79609acb6908e08e0ee2f3d8560de61fe4dce3be44a512d702d5389c45ec7763e0a43e00f94c2f672fdd776e2266585eb626e59a044e8d9bc63ac397"], 0x68}, 0x1, 0x0, 0x0, 0x20040041}, 0x44)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0)
userfaultfd(0x1)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1b, 0x0}, 0x28048834)
writev(0xffffffffffffffff, 0x0, 0x0)
r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0)
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000480), 0x4a6f81, 0x0)
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50}, 0x24000085)
r3 = epoll_create(0x400)
ioctl$AUTOFS_IOC_EXPIRE(r3, 0x810c9365, &(0x7f0000000640)={{0x3, 0x5}, 0x100, './file0\x00'})
r4 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000100)={0x0, r4, r4}, 0x0, 0x0, 0x0)
r5 = socket$kcm(0x2, 0x1, 0x84)
prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x7, @private2, 0xa}, 0x1c)
setsockopt$sock_attach_bpf(r5, 0x84, 0x85, &(0x7f0000000000), 0x90)
getpeername$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000380)=0x1c)
ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000180)=0x6f)
r6 = fsopen(&(0x7f0000000000)='jfs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000003c0)='iochabset\xd9S\xdc\x85\xba\xbd\xd5\xb4B\x1b\x88$6\x85\\\xfe\x13\x1e\f\x14d\x04\x8e;\x9f\xa1/\xbe\xab\xc4\x82o\xe3c\xc5\xdd5\x1ca<\xdd\xd4\f\x14\xc2\xbd\xd2\x93H\x1a\xc3\x03\xf7\"\x16\xe2\xe6\xa5\xf7\ar\x0e\xedU\xb8!T\x13-\xef\x9fO\x1a\x03w\x99\xc5\xc3\x89\xd8\x99\xb6y\x18\x11\xb9\xf0\x17\x7fX\xfc\xb2\xc6\xc5\xbd\xde-\xdco*\xcd\xe8\xe9\x13\x04B\x9dw\xedH\xb0\xe0\x91\x04\xe6\t\xf1U\xb2Jn\x8da\xafv a\xee\xc3\xcf\x16+\xb4\xbbn \x1d<\xeeC\x1cv\'\xc8n\xd9.\xb8\xbe\xd7\xe0\xa8\xbb;\xf5\x1agV\xfcT\\\xb6\x7f\x9e|\xc5\xec6P\xd14\xfb\xe6~\xaa0\x955W6\xc8\x8d\x85\x86Q\x89\xf9\t3a\xed\xda\xb6\xc7\xf8\xa3\xcb>\x8a\xbd\x7fH\x80\x14', 0x0)
r7 = dup2(r2, r2)
ioctl$SNDCTL_DSP_SPEED(r7, 0xc0045002, &(0x7f00000001c0)=0x2)
read$FUSE(0xffffffffffffffff, &(0x7f00000027c0)={0x2020}, 0x205b)

1m27.02862913s ago: executing program 2 (id=456):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r0, 0x0, 0x2, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0)
socket(0x1e, 0x1, 0x6)
r2 = bpf$MAP_CREATE(0xb00000000000014, 0x0, 0x48)
ioctl$DVB_DEMUX_DMX_SET_FILTER(0xffffffffffffffff, 0x403c6f2b, &(0x7f0000000000)={0x6, {"2ac78e02ff04856af9fb71f0d3fe13be", "3dfab043e15fad27a639f105b5e9f977", "47eb0b1889b90f105d66b3e5a7c94742"}, 0x4, 0x4})
r3 = syz_open_dev$dvb_demux(&(0x7f0000000040), 0x0, 0x2000)
ioctl$DVB_DEMUX_DMX_SET_FILTER(r3, 0x403c6f2b, &(0x7f0000000080)={0x6, {"2ac78e02ff04856af9fb71f0d3fe13be", "3dfab043e15fad27a639f105b5e9f977", "47eb0b7c4fb9191024da8887f94ba4fb"}, 0x4, 0x5})
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
read(0xffffffffffffffff, 0x0, 0x53)
write$cgroup_pressure(0xffffffffffffffff, &(0x7f00000000c0)={'full'}, 0xfffffdef)
sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x40090)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r5 = syz_clone(0x20000, &(0x7f00000007c0)="4cd7c1a4277f69bf4b3f41a643d104dc555501267ecbe060d4d65712066fafd62107cd9e3a5d9e606888271df907ea7cb464b7a5cb9f95c02a4e3d31dcbd96839104c8ecf80414a1f8f2504087b7b9d0f8300456b0564a481254eff73d3beeee9407d6035b88baabbbc2c0e069570716926dc1c73712d372ebd557ef20ab143f1c340d61d1b8fb82d1b92874051ccaa58b036fda20b1b6e4cb2ed54a3a16f25e08a658646d5c6063bc0ed937162b478bb960a2e74b030306a181a9fb878f77be71a46c21cacd505ea46b07202c38b6f3967ba8e3ab13250d16e11318f49a0fa1d0118d7017f29b4f130c7efbd7cc621ffd6c6c63797069fe18", 0xf9, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x0)
r6 = syz_ublk_setup_io_uring(0xed2, &(0x7f0000000180)={0x0, 0x30b5, 0x40, 0x2, 0x308}, &(0x7f0000000200)=<r7=>0x0, &(0x7f0000000240)=<r8=>0x0, &(0x7f0000000140)=<r9=>0x0)
syz_ublk_add_dev(r6, r7, r8, r9, &(0x7f00000002c0)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000340)=@new_dev={0x1, 0x4de, 0x0, 0x0, 0x1000, 0xffffffff, r5, 0x0, 0x30}}}, &(0x7f0000000380)=<r10=>0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000003c0)={0x1, &(0x7f0000000400)=[{0x6, 0xe, 0x0, 0x7ffffffb}]})
r12 = fsopen(&(0x7f0000000440)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r12, 0x1, &(0x7f0000000480)='crush_location\x00', &(0x7f00000004c0)='rack:foo\x00', 0x0)
close_range(r11, 0xffffffffffffffff, 0x0)
r13 = dup(r4)
syz_ublk_setup_queues(r13, r10, &(0x7f0000000500)={0x0, 0x4, 0x1000, 0xfeffffff, 0x32c}, 0x0, 0x1, &(0x7f0000000580)={0x2e, 0x54, 0x0, r13, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0x7, 0x826, 0x0, 0x0}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x0, 0x0, 0x0, 0xfa, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
openat(r2, &(0x7f00000006c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x28)
syz_open_dev$video(&(0x7f00000014c0), 0x485, 0x40000)

1m27.003016796s ago: executing program 2 (id=457):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r2, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
sendmsg$NFT_BATCH(r1, 0x0, 0x24000840)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a300000000048000000120a01040000000000000000020000000900010073797a30000000000900020073797a31000000000800034000000008130004800f000100756e636f6e66696e6564000014000000110001"], 0x90}}, 0x4)
socket$packet(0x11, 0x3, 0x300)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
bind$netlink(r4, &(0x7f00000001c0)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc)
r5 = syz_open_dev$vim2m(&(0x7f0000000800), 0x7, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000840)={0x1, @pix={0x8d8, 0x5, 0x50424752, 0x6, 0x8000002, 0xb, 0x0, 0xffffffff, 0x0, 0x6, 0x0, 0x4}})
getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000010000d042abd70000000000000000000", @ANYRES32=r6, @ANYBLOB="9b060000003800001c00128009000100626f6e64000000000c0002800500010006"], 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x4000000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000380)={'netdevsim0\x00'})
socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$tipc(0x1e, 0x2, 0x0)
sendmsg$tipc(r8, &(0x7f0000000780)={&(0x7f00000007c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10, 0x0}, 0x10)
setsockopt$TIPC_GROUP_LEAVE(r8, 0x10f, 0x88)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000005c0)=ANY=[@ANYBLOB="54000000090601020000000000000000020000000900020073797a3100000000f5ff0000070000002c0007800c000180080001400a0101020500070084000000060004404e2200000c000280080001407f000001"], 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r9, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x5c, 0x0, 0x8, 0x101, 0x0, 0x0, {0xa, 0x0, 0x9}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xf}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8, 0x3, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_SCTP_ESTABLISHED={0x8, 0x4, 0x1, 0x0, 0xb8}]}, @CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x40)
syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a1121710950b2a17f4f7010203010902240001000000000904"], 0x0)

1m25.797908254s ago: executing program 2 (id=463):
r0 = timerfd_create(0x0, 0x0)
r1 = syz_io_uring_setup(0xf00, &(0x7f0000000000)={0x0, 0x0, 0x10000, 0x0, 0x40055}, &(0x7f0000000080)=<r2=>0x0, &(0x7f00000000c0)=<r3=>0x0, &(0x7f0000000100)=<r4=>0x0)
syz_io_uring_submit(r2, r3, r4, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x2011}})
r5 = syz_open_dev$dvb_frontend(&(0x7f0000000440), 0x0, 0x0)
ioctl$FE_GET_PROPERTY(r5, 0x80106f53, &(0x7f0000000480)={0x4, &(0x7f00000004c0)=[{0x3b, '\x00', @data=0x13a6, 0x8}, {0xc, '\x00', @st={0x4, [{0x0, @uvalue=0x7ff}, {0x2, @svalue=0x5}, {0x3, @uvalue=0xff}, {0x0, @svalue=0x9e4}]}, 0x33}, {0x2b, '\x00', @data=0x7c7, 0x5}, {0x3e, '\x00', @st={0x4, [{0x2, @svalue=0x80000000d}, {0x1, @svalue=0x6}, {0x1, @uvalue=0x9}, {0x2, @uvalue=0x84}]}, 0x5}]})
io_uring_enter(r1, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0)
timerfd_settime(r0, 0x3, &(0x7f00000001c0)={{}, {0x0, 0x989680}}, 0x0)
r6 = socket$inet6(0xa, 0x800000000000002, 0x0)
r7 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'wg2\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r8, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840)
sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newtfilter={0x58, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x5, 0xfff1}, {0x0, 0xfff3}, {0x9, 0xb}}, [@filter_kind_options=@f_flower={{0xb}, {0x28, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x86dd}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x73}, @TCA_FLOWER_KEY_IPV6_SRC={0x14, 0xe, @loopback}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20041891}, 0x24000010)
setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, 0x0, 0x0)
socket(0x400000000010, 0x3, 0x0)
syz_open_dev$media(&(0x7f0000000340), 0x7fffffff, 0x200400)
socket(0x10, 0x3, 0x0)
r9 = socket$kcm(0x10, 0x2, 0x0)
r10 = syz_usb_connect(0x6, 0x24, &(0x7f0000000600)=ANY=[@ANYRESDEC=0x0, @ANYRES8=r5], 0x0)
syz_usb_control_io(r10, 0x0, &(0x7f0000002080)={0x84, &(0x7f0000002140)=ANY=[@ANYBLOB="200f11000000", @ANYRES32=r9], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', 0x0)
r11 = open_tree(0xffffffffffffff9c, &(0x7f0000000680)='.\x00', 0x89901)
move_mount(r11, &(0x7f00000006c0)='.\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./file0\x00', 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000740))
chroot(&(0x7f0000000780)='./file0/../file0/../file0/../file0\x00')
r12 = open_tree(0xffffffffffffff9c, &(0x7f00000007c0)='\x00', 0x89901)
move_mount(r12, &(0x7f0000000800)='.\x00', 0xffffffffffffff9c, &(0x7f0000000840)='./file0\x00', 0x0)
pivot_root(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)='./file0/../file0/../file0/../file0/file0\x00')
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0)

1m25.204791127s ago: executing program 2 (id=467):
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x0) (async)
sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) (async)
r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{r2}, &(0x7f00000001c0), &(0x7f0000000200)='%pB    \x00'}, 0x20) (async)
bpf$ITER_CREATE(0x21, &(0x7f0000000280)={r2}, 0x8)
r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x6)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
close_range(r4, r0, 0x0)

1m23.050972189s ago: executing program 2 (id=478):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x14}}, 0x0)
r2 = fsopen(0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000300)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYRESHEX=r3], 0x3c}, 0x1, 0x0, 0x0, 0x4044810}, 0x40000)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000800), r1)
sendmsg$TIPC_CMD_GET_LINKS(r1, &(0x7f00000008c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x24, r4, 0x123, 0x70bd2b, 0x25dfdbfd, {{}, {}, {0x8}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1000c084}, 0x4801)
sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gre={{0x8}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)={0x14, r6, 0x1, 0x0, 0x0, {0x27}}, 0x14}}, 0x20000040)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r7, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000780)={0x24, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @nested={0x4, 0x2}, @nested={0x5, 0x1, 0x0, 0x1, [@generic="13"]}]}, 0x24}], 0x1}, 0xcc000)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x1, 0x803, 0x0)
getsockname$packet(r9, &(0x7f00000005c0)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000600)=0x14)
sendmsg$nl_route(r8, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=@newlink={0x40, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000)
syz_usb_connect(0x3, 0x224, &(0x7f0000000000)={{0x12, 0x1, 0x700, 0x14, 0x8f, 0xb9, 0x10, 0x403, 0xfb5b, 0xbb0c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x212, 0x1, 0x0, 0x7, 0x38, 0xff, "", [{{0x9, 0x4, 0x33, 0xfe, 0x7, 0x10, 0xd9, 0xd4, 0x9, [@uac_as={[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x8, 0xff, 0x3, 0x1, 0x34}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x2, 0x1, 0x7f, 0x5, "d4db3e", 'p'}, @as_header={0x7, 0x24, 0x1, 0x5, 0x9, 0x1001}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x0, 0x1, 0x5, 0x8}, @as_header={0x7, 0x24, 0x1, 0x62, 0x7a, 0x3002}]}], [{{0x9, 0x5, 0xc, 0x0, 0x200, 0x4, 0x7, 0x7e, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x18, 0x5}]}}, {{0x9, 0x5, 0xf, 0x8, 0x10, 0xb5, 0x9, 0x1, [@generic={0xcc, 0x23, "c640d7a9d413b0ca3050c433d7bfa4949d9c5bb8c5cd72a52075bf57f2d667cda1c53ece719d03fb1b413f21a3688659df4d616c761e8125f389b45fd1e6590ca3f7c95b475db3fc089446ec4c0e436f8b1df22f7b121fa7b8048a1d6b87a99634b4d96f426d3b4c74d45988f514c7a65893a59cef1009701bf1bf32a3bf1b6b37ebadb86ea17f4b3d1dbaad6942308769fdba2bc01d53e03151fdd1f49c584f879079a3dd65e6ae633c9a357e64854516f22e0de68f3523117ef3bd64b1278145a1a0189e4a6cd91fe9"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0xf9, 0x1}]}}, {{0x9, 0x5, 0xe, 0x0, 0x3ff, 0xf9, 0xb, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x1, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0xb06}]}}, {{0x9, 0x5, 0x5, 0x8, 0x8, 0x4, 0xd}}, {{0x9, 0x5, 0xf, 0x0, 0x40, 0xf9, 0x0, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xf, 0x3}]}}, {{0x9, 0x5, 0x5, 0x0, 0x40, 0x8, 0x2, 0x5, [@generic={0xa0, 0x22, "a0032a02ff88f065a546cf03c9d0ad782d33f350687da6a5de7e8dc57ce1f580f3eec6e53cdab941d503c7300d99100c0c2bf0f8437d3779f52d00a246684fe60a59a3a3e43363c71c49ea9fc5447a8f33b3c6b65668a9ae17ffaf0fe1e01ad40c625fdcbf5783803d48d5b82655bedcb561f06c9e761f1c3b01b554bb41ae85175e889848d92a932d44f3827c3cf6348d5a7e1a0a2b075736b43791daf3"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x10, 0x4, 0x32, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0x7}]}}]}}]}}]}}, &(0x7f0000000240)={0xffffffffffffff95, 0x0, 0x0, 0x0})

1m22.264334665s ago: executing program 32 (id=478):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x14}}, 0x0)
r2 = fsopen(0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000300)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYRESHEX=r3], 0x3c}, 0x1, 0x0, 0x0, 0x4044810}, 0x40000)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000800), r1)
sendmsg$TIPC_CMD_GET_LINKS(r1, &(0x7f00000008c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x24, r4, 0x123, 0x70bd2b, 0x25dfdbfd, {{}, {}, {0x8}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1000c084}, 0x4801)
sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gre={{0x8}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)={0x14, r6, 0x1, 0x0, 0x0, {0x27}}, 0x14}}, 0x20000040)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r7, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000780)={0x24, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @nested={0x4, 0x2}, @nested={0x5, 0x1, 0x0, 0x1, [@generic="13"]}]}, 0x24}], 0x1}, 0xcc000)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x1, 0x803, 0x0)
getsockname$packet(r9, &(0x7f00000005c0)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000600)=0x14)
sendmsg$nl_route(r8, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=@newlink={0x40, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000)
syz_usb_connect(0x3, 0x224, &(0x7f0000000000)={{0x12, 0x1, 0x700, 0x14, 0x8f, 0xb9, 0x10, 0x403, 0xfb5b, 0xbb0c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x212, 0x1, 0x0, 0x7, 0x38, 0xff, "", [{{0x9, 0x4, 0x33, 0xfe, 0x7, 0x10, 0xd9, 0xd4, 0x9, [@uac_as={[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x8, 0xff, 0x3, 0x1, 0x34}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x2, 0x1, 0x7f, 0x5, "d4db3e", 'p'}, @as_header={0x7, 0x24, 0x1, 0x5, 0x9, 0x1001}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x0, 0x1, 0x5, 0x8}, @as_header={0x7, 0x24, 0x1, 0x62, 0x7a, 0x3002}]}], [{{0x9, 0x5, 0xc, 0x0, 0x200, 0x4, 0x7, 0x7e, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x18, 0x5}]}}, {{0x9, 0x5, 0xf, 0x8, 0x10, 0xb5, 0x9, 0x1, [@generic={0xcc, 0x23, "c640d7a9d413b0ca3050c433d7bfa4949d9c5bb8c5cd72a52075bf57f2d667cda1c53ece719d03fb1b413f21a3688659df4d616c761e8125f389b45fd1e6590ca3f7c95b475db3fc089446ec4c0e436f8b1df22f7b121fa7b8048a1d6b87a99634b4d96f426d3b4c74d45988f514c7a65893a59cef1009701bf1bf32a3bf1b6b37ebadb86ea17f4b3d1dbaad6942308769fdba2bc01d53e03151fdd1f49c584f879079a3dd65e6ae633c9a357e64854516f22e0de68f3523117ef3bd64b1278145a1a0189e4a6cd91fe9"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0xf9, 0x1}]}}, {{0x9, 0x5, 0xe, 0x0, 0x3ff, 0xf9, 0xb, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x1, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0xb06}]}}, {{0x9, 0x5, 0x5, 0x8, 0x8, 0x4, 0xd}}, {{0x9, 0x5, 0xf, 0x0, 0x40, 0xf9, 0x0, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xf, 0x3}]}}, {{0x9, 0x5, 0x5, 0x0, 0x40, 0x8, 0x2, 0x5, [@generic={0xa0, 0x22, "a0032a02ff88f065a546cf03c9d0ad782d33f350687da6a5de7e8dc57ce1f580f3eec6e53cdab941d503c7300d99100c0c2bf0f8437d3779f52d00a246684fe60a59a3a3e43363c71c49ea9fc5447a8f33b3c6b65668a9ae17ffaf0fe1e01ad40c625fdcbf5783803d48d5b82655bedcb561f06c9e761f1c3b01b554bb41ae85175e889848d92a932d44f3827c3cf6348d5a7e1a0a2b075736b43791daf3"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x10, 0x4, 0x32, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0x7}]}}]}}]}}]}}, &(0x7f0000000240)={0xffffffffffffff95, 0x0, 0x0, 0x0})

6.995525595s ago: executing program 1 (id=834):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x40080, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000300))
prctl$PR_MCE_KILL(0x29, 0x1, 0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x68346000)
socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'lo\x00', <r1=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000200)=@newqdisc={0x34, 0x24, 0x100, 0x3, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0x10}, {0xffff, 0xffff}, {0xb}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}, @TCA_RATE={0x6, 0x5, {0x7, 0x9}}]}, 0x34}, 0x1, 0x0, 0x0, 0x1d4}, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f00000006c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0)
ioctl$DRM_IOCTL_INFO_BUFS(0xffffffffffffffff, 0xc0106418, &(0x7f0000000240)={0x0, 0x81, 0x4, 0xae8, 0x2, 0x1ff})
r3 = landlock_create_ruleset(&(0x7f0000000080)={0x100}, 0x18, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000140)=ANY=[], 0x3261e)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x13, r5, 0x0)
setsockopt$inet_int(r4, 0x0, 0x8, &(0x7f00000001c0)=0x1f4, 0x4)
r6 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_pktinfo(r6, 0x84, 0x74, 0xfffffffffffffffe, &(0x7f0000000540)=0x41)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000002c0)={'veth1_virt_wifi\x00', 0x7101})
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', <r8=>0x0})
ioctl$BTRFS_IOC_FS_INFO(r3, 0x8400941f, &(0x7f0000000780))
sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0xb56d, 0x8000003, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088d1}, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc04, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0x6}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890)
setsockopt$inet_int(r4, 0x0, 0x17, 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000280), 0x60000, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000))
syz_open_dev$tty1(0xc, 0x4, 0x2)

6.72264611s ago: executing program 1 (id=843):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/power/pm_test', 0x141a82, 0x0)
sendfile(r1, r1, &(0x7f0000000380)=0x7, 0x4)
syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="040e05cb0720"], 0x8)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = syz_open_dev$usbfs(&(0x7f00000003c0), 0x205, 0x2)
r4 = syz_open_dev$dri(&(0x7f0000000400), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(r4, 0xc01064c8, &(0x7f0000000580)={0x2, 0x0, &(0x7f00000005c0)=[<r5=>0x0, 0x0]})
ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r4, 0xc01064ac, &(0x7f0000000600)={r5, 0x0, 0x0})
r6 = syz_open_dev$dri(&(0x7f0000000640), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(r6, 0xc01064c8, &(0x7f0000000680)={0x2, 0x0, &(0x7f00000006c0)=[<r7=>0x0, 0x0]})
ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r6, 0xc01064ac, &(0x7f0000000700)={r7, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f0000000740)={r5, r7, 0x0, 0xf8a, 0x4, 0x9, 0x7, 0xf, 0x8, 0x16362527, 0x5c9dcc9a, 0x5})
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r3, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000004c0)={[0x9, 0x80000000, 0x1, 0x3, 0x5, 0x2, 0x4, 0x3ff, 0xf, 0x2, 0x716c, 0x3, 0x101, 0x100, 0xfffffffffffffe53, 0x9], 0x252001, 0x2})
mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x81, 0x3)
syz_emit_ethernet(0x52, &(0x7f0000000040)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x1c, 0x6, 0x0, @private1={0xfc, 0x1, '\x00', 0x2}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0x2, 0x0, 0xfffc, {[@exp_fastopen={0xfe, 0x4}, @mss={0x2, 0x4}]}}}}}}}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r8)
ioctl$NILFS_IOCTL_CHANGE_CPMODE(r0, 0x40106e80, &(0x7f0000000780)={0x7})
sendmsg$MPTCP_PM_CMD_ANNOUNCE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x18, r9, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x2400c000}, 0x20008084)
close(r0)

5.915901942s ago: executing program 1 (id=846):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x10, 0x7fff0001}]})
setns(0xc9, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
pipe(&(0x7f00000002c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000340)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
r4 = gettid()
waitid(0x0, r4, 0x0, 0x80000000, 0x0)
syz_open_dev$sndpcmp(0x0, 0xfffffffffffffff1, 0x402000)
syz_open_dev$vbi(&(0x7f00000003c0), 0x3, 0x2)
sendmmsg$unix(r3, &(0x7f0000000400), 0x318, 0x0)
recvmmsg(r2, &(0x7f0000000440), 0x10106, 0x2, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r0)
sendmsg$NL80211_CMD_REGISTER_FRAME(r1, 0x0, 0x44894)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f00000004c0)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x3, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000500), 0xa4342, 0x0)
dup(r5)
r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000540)='\x00', 0x89901)
r7 = socket$inet6(0xa, 0x3, 0x5)
r8 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2)
ioctl$VIDIOC_CROPCAP(r8, 0xc02c563a, &(0x7f00000005c0)={0xa, {0x4, 0xb, 0x1, 0xffffffff}, {0xfffffffc, 0x2, 0x4, 0x1000}, {0xa47, 0x100005}})
setsockopt$inet6_int(r7, 0x29, 0x1000000000021, &(0x7f0000000600)=0xffffffc3, 0x4)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r9, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0)
r10 = syz_clone(0x2808000, 0x0, 0x0, 0x0, 0x0, 0x0)
move_pages(r10, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r9, &(0x7f0000000700)=[{{0x0, 0x0, 0x0}, 0xffffffff}, {{0x0, 0x0, 0x0}, 0x8004}, {{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000880)=""/4112, 0x1010}, {&(0x7f00000018c0)=""/7, 0x7}, {&(0x7f0000001980)=""/99, 0x63}, {0x0}], 0x4}, 0x400000}, {{0x0, 0x0, 0x0}}], 0x4, 0x30100, 0x0)
sendmmsg(r7, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001a40)=ANY=[], 0x28}}], 0x1, 0x4000000)
fchdir(r6)

5.841468353s ago: executing program 0 (id=847):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r1, 0x8948, &(0x7f0000000240)={'bond0\x00'})
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r2, 0x80de02bd3ca0bfdb}, 0x14}}, 0x0)
recvmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r3}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20)

5.501217346s ago: executing program 0 (id=851):
r0 = socket(0x840000000002, 0x3, 0xff)
sendmsg$inet(r0, &(0x7f0000000900)={&(0x7f00000006c0)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f00000007c0)=[{&(0x7f0000000000)="974701000000201c2488e18d93d74c6f68bb1a761a4a946249c9a834", 0x1c}], 0x1, &(0x7f0000000480)=[@ip_pktinfo={{0x14, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x35}, @rand_addr=0x64010101}}}], 0x20}, 0x4048804)

5.224693584s ago: executing program 3 (id=852):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000001001000050000"], 0x50)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x400b4)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20)
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r0, &(0x7f00000001c0), &(0x7f0000000240)=""/177}, 0x20)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
r2 = openat$userio(0xffffffffffffff9c, &(0x7f0000000680), 0xa6900, 0x0)
write$USERIO_CMD_SET_PORT_TYPE(r2, &(0x7f00000006c0)={0x1, 0x7}, 0x2)

5.21990954s ago: executing program 0 (id=853):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x100000000021)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "d607f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c9f39c3539e4f8d3ee0878ae95bc7f52363c468b257ffb3baf7aea4bb76dcfd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b160600000000000000fb19d1d2bd3c8c4e97da2213f9d5c3b90400000000000000c279f02558083906666827d61dcc3a633bb0b1250b5a293e3877adc1660edbc9a0307a25720a170e7f5670e4000044febf7ddc73fd4a5a0b6c281e05c541471d8d2a58f52dac665f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "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"})
write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r1, 0x0)
r2 = syz_open_dev$dvb_demux(&(0x7f0000000140), 0xfffffffffffffffe, 0x62400)
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r2, 0x40146f2c, &(0x7f0000000180)={0x1, 0x0, 0x1, 0x10})
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r4 = dup(r3)
r5 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x62001, 0x0)
ioctl$TCXONC(r6, 0x540a, 0x3)
ioctl$VIDIOC_S_EXT_CTRLS(r5, 0xc0205647, &(0x7f0000000200)={0xf000000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x98f909, 0x8002, '\x00', @string=0x0}})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r4, 0x2000)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_buf(r7, 0x6, 0xe, &(0x7f0000000280)="dc8daf8d", 0x4)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0)
setsockopt$inet_tcp_buf(r4, 0x6, 0x1c, &(0x7f0000000000)="f286d43e9ba0aff680c51b2ea727382708f361f658927ad8a381f54fd1ee4c", 0x1f)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x972, &(0x7f0000006680))
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
futex(0x0, 0x8, 0x1, 0x0, 0x0, 0x1000008)
sync()
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x8, &(0x7f00000002c0), &(0x7f0000000300)=""/8, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)
preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
r8 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
ioctl$VIDIOC_CREATE_BUFS(r8, 0xc100565c, &(0x7f0000000140)={0x5, 0x4, 0x1, {0xa, @pix_mp={0x4, 0x7fff, 0x34565348, 0x7, 0xb, [{0x8, 0xaf}, {0x2a9, 0x8}, {0x4000002, 0x8}, {0x1, 0xa3d}, {0x5}, {0x1, 0xff}, {0x0, 0xa}, {0x7ff, 0xa}], 0x6, 0x3, 0x1, 0x2}}, 0x1})

5.060671335s ago: executing program 4 (id=854):
r0 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x76, 0x160341)
ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000240)=@usbdevfs_driver={0x0, 0xfffffffa, 0x0})
socket$inet6_sctp(0xa, 0x5, 0x84)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f00000002c0)={0x0, 0x30b5, 0x0, 0xfffffffe, 0x12c}, &(0x7f0000000340)=<r2=>0x0, &(0x7f0000000380)=<r3=>0x0, &(0x7f00000003c0)=<r4=>0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000900), 0x8080, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000940)={'syzkaller0\x00', 0x2})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000980), r6)
sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000a80)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000bc0), 0x20a942, 0x0)
close(r11)
r12 = socket(0x400000000010, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000c00)={'syzkaller0\x00', @multicast})
sendmsg$nl_route_sched(r12, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000cc0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r10, {0x0, 0x3}, {0xe, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x8044)
ioctl$SIOCSIFHWADDR(r11, 0x8922, &(0x7f0000000d00)={'syzkaller0\x00', @random="2b0100004ec6"})
syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000400)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, <r13=>0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000480)=@any_dev={0x4, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x45}}}, &(0x7f00000004c0)=<r14=>0x0)
r15 = socket$inet6_tcp(0xa, 0x1, 0x0)
r16 = dup(r15)
syz_ublk_setup_queues(r16, r14, &(0x7f0000000500)={0x0, 0x1fffd, 0x8, 0x3}, &(0x7f0000000580)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x3, 0x10000004, 0x0, r16}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf7ff, 0x400, 0xfffffffe, 0x143, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x40, 0x3, 0xe3, 0x0, r16}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x29a6, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000800)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x800000, 0x0, {}, 0x1f, r13, '\x00', {0x2, 0x0, 0x0, 0x0}}, 0x0)
syz_emit_ethernet(0x6a, &(0x7f0000000880)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0008004503005c00000000"], 0x0)
ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f00000008c0)={0x3d})
openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)

4.868353452s ago: executing program 3 (id=856):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x81, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1c)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e24, @loopback}, 0x10)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f00000001c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000200))
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000240)={'syzkaller0\x00', 0x1})
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x80}, 0x50)
r2 = syz_open_procfs(0x0, 0x0)
read$char_usb(r2, &(0x7f0000000300)=""/25, 0x19)
r3 = syz_ublk_setup_io_uring(0x64d, &(0x7f0000000340)={0x0, 0xd58c, 0x1000, 0x2, 0x14d}, &(0x7f00000003c0)=<r4=>0x0, &(0x7f0000000400)=<r5=>0x0, &(0x7f0000000440)=<r6=>0x0)
syz_io_uring_submit(r4, r5, r6, &(0x7f0000000480)=@IORING_OP_TIMEOUT={0xb, 0x12, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000500), 0x1, 0x40, 0x1})
syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000540)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000005c0)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000600)={0x0, 0x0})
r7 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0)
writev(r7, &(0x7f0000000840)=[{&(0x7f0000000880)="0e000000", 0x4}], 0x1)
getgroups(0x0, 0x0)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0)
r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000008c0), 0x0, 0x0)
ioctl$TCSETS(r8, 0x40045431, 0x0)
r9 = syz_open_pts(r8, 0x8001)
write(r9, 0x0, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg$inet(r1, &(0x7f0000000100)=[{{&(0x7f0000000140)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000)
sendto$inet(r1, &(0x7f0000000180)="3293", 0xffffffffffffffe2, 0x84, 0x0, 0x0)
shutdown(r1, 0x1)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x426b40)

3.794771788s ago: executing program 3 (id=858):
socket$inet6_udp(0xa, 0x2, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x3c1, 0x3, 0x1308, 0x1140, 0x178, 0xc, 0x1140, 0x178, 0x1238, 0x258, 0x258, 0x1238, 0x258, 0x3, 0x0, {[{{@uncond, 0x0, 0x1100, 0x1140, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x40, 0x51, "31e995401e6c8ad9e89202317cd3a88ddf00e4f3113ad089ec50406a6948"}}}, {{@ipv6={@private1, @mcast1, [], [], 'wg2\x00', 'hsr0\x00', {}, {0xff}}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1368)
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000002700), 0x103080, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(r4, 0x4038ae7a, &(0x7f0000002740)={0x1, 0xaa4, 0x0, &(0x7f0000002780)})
sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000002800)={&(0x7f0000002840)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="010025bd7000fcdbdf2503000000180001801400020073797a5f74756e"], 0x44}, 0x1, 0x0, 0x0, 0x20009085}, 0x40040c0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000002880)={0x0, 0x0, &(0x7f00000028c0)=[{&(0x7f0000002900)="a443fcd7770245fc989b50ea09817223dd9fac342f8f7c3d2cdcae3b14f82c974dc1", 0x22}], 0x1}, 0x6)
openat$kvm(0xffffffffffffff9c, &(0x7f0000002940), 0xa002, 0x0)
r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x400000030)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000002980)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r4, r6, &(0x7f0000004000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000001580)="48b800000000000000800f23d00f21f8351000000b0f23f8660fc7b60800000065673e8e720ac402ddbc02f2af66f30f21be66baa000edf20f1a9ab96d0000c4c2fd2a5e00c4817d5a7646", 0x4b}], 0xc4, 0x8, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000002a00)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
ioctl$KVM_SET_CLOCK(r4, 0x4188aec6, &(0x7f00000027c0)={0x1, 0x0, 0x0, 0x20000000000003, 0x1004})
close(0x4)
sendmmsg$unix(r2, &(0x7f0000000100), 0x318, 0x0)
recvmmsg(r1, &(0x7f0000001cc0)=[{{&(0x7f0000001d40)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x0, &(0x7f00000019c0)=[{&(0x7f0000001600)=""/238}, {&(0x7f0000001700)=""/181}, {&(0x7f00000017c0)=""/210}, {&(0x7f00000018c0)=""/12}, {&(0x7f0000001900)=""/130}], 0x0, &(0x7f0000001a40)=""/241}, 0xfffffffa}, {{&(0x7f0000001b40)=@rc, 0x0, &(0x7f0000001c00)=[{&(0x7f0000001bc0)=""/18}], 0x0, &(0x7f0000001c40)=""/108}, 0x59}], 0x1015c, 0x10002, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x3, 0x0, 0x10001, 0x0, 0xb47, 0x8, 0x0, 0x80000001, 0x3}, 0x0)
unshare(0x400)
socket$inet(0xa, 0x6, 0x27ff)
socket$vsock_stream(0x28, 0x1, 0x0)
r7 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r7, 0x7a7, &(0x7f0000000140)=0x80000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r7, 0x7a0, &(0x7f0000002680)={@my=0x1})

3.781295156s ago: executing program 4 (id=859):
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000940), 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000980)={0x0, 0x0, 0x0, 'queue0\x00'})
read$char_usb(0xffffffffffffffff, 0x0, 0x0)
r2 = syz_ublk_setup_io_uring(0x81b, &(0x7f0000000100)={0x0, 0x30b5, 0x400, 0x4001002, 0x372}, &(0x7f0000000180)=<r3=>0x0, &(0x7f00000001c0)=<r4=>0x0, &(0x7f0000000200)=<r5=>0x0)
syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000300)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000380)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f00000003c0)=<r6=>0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
r8 = dup(r7)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24044451}, 0x0)
r9 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, 0xffffffffffffffff, 0x0)
syz_ublk_setup_queues(r8, r6, &(0x7f0000000400)={0x0, 0x1, 0x3600, 0x2, 0x255}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb351, 0x400, 0x2100, 0x10000004, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0xfffffffe, 0x367}}], 0x1, &(0x7f0000000780)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0x2, 0x5e8, 0x0, 0x0}}, 0x0)
writev(r0, &(0x7f0000000000)=[{&(0x7f00000004c0)}], 0x1)

3.214117596s ago: executing program 1 (id=861):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x8)
fallocate(r0, 0x0, 0x1000000, 0x3)
unshare(0x2a020400)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f0000000240)=[{0x6, 0xff, 0xfe, 0x7fff0006}]})
r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000280), 0xa2003, 0x0)
r3 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_FLUSH(r3, 0x0, 0xd1, 0x0, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f00000002c0)={0x20004, <r4=>r1})
r5 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000340)={0x0, 0x0, r4})
newfstatat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, <r6=>0x0}, 0x6000)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000000500)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, <r7=>0x0}}, './file1\x00'})
lchown(&(0x7f0000000400)='./file1\x00', r6, r7)
ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f0000000380)=0x5)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x200000c, 0x13, r0, 0x2000)
lsetxattr$security_capability(&(0x7f0000000c00)='./file1\x00', &(0x7f0000000c40), 0x0, 0x0, 0x0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x2, 0x7, 0xb})
r8 = socket(0x200000000000011, 0x4000000000080002, 0x0)
setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f00000003c0)={0x3, 0x7}, 0x4)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'syztnl2\x00', <r9=>0x0, 0x2f, 0x2, 0x60, 0x8, 0x20, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, 0x1, 0x8087, 0x2, 0x8}})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000001c0)={0x1, &(0x7f0000000140)=[{0x7fff, 0x0, 0x4, 0x1}]})
setsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000000100)={@empty, @broadcast, r9}, 0xc)

2.983318639s ago: executing program 3 (id=862):
r0 = socket(0x10, 0x3, 0x4)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newqdisc={0x68, 0x14, 0x70b, 0x0, 0x25dfdbfd, {0x2, 0x0, 0x0, 0x0, {0x4}, {0xb, 0xc}, {0xa}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x10, 0xfc, 0x2d00, 0xc, 0x1, 0x0, 0x100005}}, {0x4}}, {{0x1c, 0x1, {0x0, 0xc, 0x8, 0xd, 0x1, 0xa, 0x2}}, {0x4}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x40081}, 0x0)

2.818645477s ago: executing program 4 (id=863):
r0 = syz_open_dev$sndpcmc(&(0x7f00000000c0), 0x1, 0x2)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000800)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0x1, 0x1, 0xfffffffc, 0xffffffff, 0xffffffff], [0xffffffff, 0x7, 0xfffffffd, 0xa, 0xffffffff, 0x0, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0x83, 0xffffffff, 0xffffffff, 0xffffffff, 0x3, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x9, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0xa, 0x186a0, 0x0, 0x0, 0x1}, {0x103, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x101000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0xffd, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]})
bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0xe, 0x4, &(0x7f0000000cc0)=ANY=[], 0x0, 0x4, 0xc3, &(0x7f0000000d00)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000140)=0x2, 0x4)
setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f00000001c0)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x0, 0x8}, 0x1c)
sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000e40)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000e80)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000ec0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000f80)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x1, 0x803, 0x0)
getsockname$packet(r6, &(0x7f0000000fc0)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001000)=0x14)
sendmsg$nl_route(r5, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000010c0)=@newlink={0x44, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000)
ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r0, 0xc0884113, &(0x7f0000000a80)={0x1, 0x8, 0xa4b0, 0x3ff, 0x100000000, 0x7, 0xffffffffffffc474, 0x8, 0x5, 0x0, 0xfffffff8, 0x1})
ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r0, 0xc0984124, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3})
syz_clone(0xe9dc3c416cdfa10c, &(0x7f0000001540)="16c1d244e5e006992fa5c7b5e6c62525e5d8fddbcab58f838df5bba551cfe43385b02bf7f961e268ca5c03b663c7173e231e34bd022c49b7c7752a6a5e749314e628dd433b548807053b5fd647a5b69246a9c6ae5546eedf2ff626ca8df517045957551ea7ac2ce403e413c06ab7ef02e4cd1092cfcc9253731e76e5379a4280f2a4eebe13a050212186cdecdd28ce76c060fcb6603c901345331747c3e956fb1db6c01ac211514ff504862e347b1e020a0fdcb77ec1fbe8d27332b5706256ad6864d315595485eb373e7e6d4e23663be2573d5180776a2be02c6c79cafc3f5ef3d06789fc683cc00f318aeb1f217aab5024922dd6bcbbf61a9e9503a7950bb387a4244610243b1834c213acf87f18c90e84e365779bb202da269de9840cb8190b1bed714d11d140c32de102af2e5722445214c5892dc5df3050f29b1787aed6570b22ecfc0fa344756b4f418040e4166a9661702db20e5a6e61ae58bf1ff85bab3b77bd2f36f33080c902576fb522fae44a5ea9e7ed64da2fbb4a171372e034a0a55914be235945bfbd5c9eb50d69aaf2a2b2331b7984472ef2ae2340a09bc6c6c91cf4178ca9693ede6c626c54abf6782283a1db352548a7d3991e6b4f61599871baa19f5b92eaea17d15bef13511db4c4779ffbddf4ab44489af629a88e1b521ac8b14f4f99eed9a6a8ac2919db20292bf3377037ba505247c3c218e81a8d28a845afaae25b2f49b82208b9f763b2becc6c8d6a1a7e46748c4a2a2d28685fe8572acca4446f746875934427d137677ec0f8e54c39e04e59e3ac13f32a32437d6283a0f3784ec481c63c342a7b55663726f0400efae43f14f9ac5d9e6499fbd73cda4650334c3eff3617951fe545dd34a9174173beb981253c6e542653e9a7ab1042570ac9562f363271aede2bb10452d4625b4008db21bbea28ba1349224fd3d0e6ee87a3818a828dc9f6c9f733e1708c77713b066bd96065a8f9588359054ecd402b4d0719292dbb9304d65a524627a904896d31af060861fd08f5319443c2a3838b3f4bfe16321135771ef71f4e7b4ed028ede062de22f0ee6b968015f8d6ea45b549c187af54d976f73d37eb249c055fc470a5cb2ea27c6e936b10a5cc1691e2c5e1ef05b585f3f9984e94644ab625a9aa430e6f50a1d5ef5d41672f2b38e54af44d89faf080e3cfcc346dd582670f905a5daf6f686317c9e3ca362edd0a5c6c01644a12180128a6a5dcb72da77fbba252e2023527649c1f9ca2d8fe51f8211a655345ff7daf073e1e827e752dfabfd5cb85d0a9867f29ce89368d01090f75c15f6be44c508c0a2ba9fbf85f8ce6354013a095feefec31e68816c153de1de74aa7a72e36eba363bc17af7b7e3d50ad772819b2e149e478d2a776b68ff2eb81bdc2adc6776ec365ffb3165fdc87e675d69e05c4922d09e0357517babee5179843e8b4974aa1bc8e535abf42778d1b5a8b21ea6e0a2f82eef7e1479f91839657a6fe1f0290b54674d85da6bc2e5a918e31dda3d69b49fd1fe92340dcafb6647fd6f9f9dcfd49f64a8119771c8859562b1cba2c07d94c3743a6e7b44ffafd2aadbe3a3cb9deb921851f83db2de8ecaa77ead61be29087a44c52d4cd441616feaa87469651779e9df7e1476ed9407c12f107669e339458605c1b3148b5c2f3907e60c944d3952b4cbb5df9048bf3382f00b5cf594f23614a3967ca0e94f337c9c17b9047ecd4fd2603c6056d5b9f87873429be6661b05c2712b7e36b9823294d920581f26fe1187c5526b1d228bbe2c74eddfeca88e83258ec1f12fc38afb057cc635e42864e15bad2d7fe6d4a9b2e718f0a7eee2071aa066487acde1947c65b5c86d928049738ea16f2ce3c99e6b92c9ae01430ce089816447cce8f3a00f0fe141a7028a1eccd5b3296081b5f2a2b0535a7c4d95cba1f3ae4b5189a8c145f449ce0657bb3b72e25ad3be41f9f74960289712fe007e881368f198a9380faff7e8c3dcbc62098157b9ee4a168318fcc3ba855cb5405a119738d5522ae9e0478615ce554f09824143c2f284f9f1d38290320d8be78b43cf842159f282f3369fe959c0119196c672589f1de44813c3c73f36b135e937d14389a46a069dd6cad97a9a19a7c0366de5f6366303a62e1c61ee9225d8a529cf660414adf5c3ed331ca5788ad48e217d9743d84961b0b5cc595e597e003f440763a46a15bedc0c029b915bc37b2ac250b140dc37c37285d569773d2849f8b0a4d7cb0bcbd6985cb8cd23aea5c8edba73dccfd16f7922d6cc1e665d4b21f35bbcff6ae90a8adc2d94442c3481e5c5c24fe77ad8e3f755a121a2fb9d0bdcad486e2391c1d8f8383b0230aeda988903170bd2ef50eedbf47c1db8b8daf6ae0a1626a963565c1247d18e8f34c12a14ea8524f9863f4a7cc3e36f85ba37d17125cc9e55b58e217dd9f991b62d6c25b1477566d5d7e61997b55172013767f731cfcaaf40b71dcc5ac8997523b1d7bb1aaaf0a1bb1307b8d0e421ee8c088b00839b098be3fbb7e9778ef24d4569c49eca25ee7c7421c9f44e4e8320c61ca0c580797057823aea54fa4b0fe948e56612728f0c83e9c3e0da7c9495f48b0ee3f7a9d135c813326c4a7e8cf4b87a42a7854770f6d23c9d1d66d909140ad532017e82717c3d996b91d29f4cbdc1c19b3c832f5a683d08ac8858f16f85e08b6d2cdc70c7ccece04dc353a1e8ea2d8758c40aae6cf6bbecc4f0eebcc1c6a6950a4cebeb85f3a09d47371dc7cfa47b2d99fa72093828e30c6c9cb6ddd83a743ee29f4d77aab6371897d180d415853953cf784e393c514f70b0994c6377d13301eec48f13b1c60d8a4ed97ec2cfc4f169ea0b34a3a3d94c06faa557d2ede18648de3724606b050238e3e859d3cac4796491c6e05f8d2d4acfa6fe4ce3696274ed777750764569adf0a58bcc773175231a1fecc267274fe2b02158ce9d0e0ec7187f96ac0baa50500d8e2de768535f6f7f25288bc7e03f2bce59957ff09c9966970c68802a61405cd6514b133ac64c30a05dcce5fca3ef138161b4f393450907202b093cc26361cbe172b237250d721171e72097f743288e3dbc8586c637be43a4b4710df35f11ce76e890d787097a93ca43a015d995f9c0707ea6a040ae9bc2d17ae52c7554e5184de56727930b6c7ea06374750349ea9da1f17bc8d675473834f0cb44fb719a84d142999174ae7a01e1ec875d823acd98ecdb3da5734eed7dba44e0a93ec9ca82bf5d46b7afa46c70cb0a084c1ef58ffe98683e551dc72a4a23ac7348062c2b73005dd86c16ed0b18a249ad28a7fbbc4f75d6bf1371d8a3765a72071e8221c680a9ddfda39736832278f02ab146fc5c1b6315470edb9a31db680a25ac16c16c231776431d0ee2d9dec06bab32a608edb47e90458951cdf7025d51134d6f6d0b714e6bc6af3e932e51ec964d8bbbdee74b9fd25d2ecbbb01fd2055deca793d1b3bb0aa06f403cae028864c39b88eea314e6b945f79d0ab145fc5dbb2229755d3932c025135ecfe606d5e0e0e0476dd91fdb4d63e688718ebe7dbcd4fe54cd026daeb65452da1c0a2ce80f8fb79b1e23d7759d22146534b451f1c3ed862d375db6ad013f9057517ba0b07a4b6f9d157bcc6ef4c14249fda289b535a477ff6d52ca88669f9027aa2f08e19abeaac74676bac33a99a3bd3e8101d0776c8b0ea6df9369e4f5581e336da1d6065a6bac26b7ddd8b4f35c09178bcdc00b0149b1c4c0e950f5b6f2ac99003967d3eea8539341c3bda05b326866167b75637bc21781fb6ee5a0a5ccccac6e111223a138a64af5fbb92a73a53bd3d6a46c1833249361c2ef4d9cdc9c5721b2a712248d196aab858d9954619f780ad218724fecc6429cf47079fb6a79a401cdbb4ad92c1bec676695504e105e48af6058098674ac077d8a98370670d6366093a5ddf0c654728655e549770fc0b55501447730206fed8c3b0b45feab9a85fdddf0f62bc44b208dd465bd976c439a400ea9b85ecc13c4ec6700abc5663a73ffc58d90ed7df5ab9e172ce99f232df87b1db257ee4f0d62e0eec4ceecd3b1eda5dfa01f98ec45aeba7f6e611cbf4c8c0d0a48452511ee5848cee2d3ad206d574fde987d608fc3380ac3a96fd3db08ce1f3ea3732f076e0b154a71c89a271da13818a1a010360541d346f2cc5192dde957e4d4b833958a5bc3b2ff999904ac19a306fe336ec3489458227820a10dc956fa3f6927b57e4e86816db705fd86318ea6a7bf1e2d021727d1783b5a7e5400958472f3915c0d0212bd1f7b7c0cb803487b947f216d5e3069f6f244955dd85c92e77f65ab3adc6de7433a11efe9e650fd64588aa93bcca85e90a122c48bf649a43642da4eb14eeec07dc60725e3abcb138146e389983f14809e0b424d0fabefac01be434a65ebd1c2ae0bc5e33df1fe4903a806c1e7a5ea2b85b76362f00138e5a1f7d0630d1e1a7d0c712c70a0ac169d08adbbc29194ae04d4153cd794ef696bfad994cd22d88e308ad44b100f6402b3fd271f3d32dacfb581cf0eac623ee55b2239e8180d9b44ab2166afd7c1aab01057f8bada139f41b112a08bb48cf60dc3a471c60935b8740c5541736dd793b9635734a73c165dd2e2c7442b576130ee98a5211d2299ef1a98223f5edc004a20ac049585173394b44c07b8d9a5efb2f3d71e1f01975592f1912be63fe072f9307e448e9289385447186dd1d36550895f5acf7ccada95020e4552001b1d2f049a4b72f28db37acc3b55261317553541f47a74d94f69fe4547920b364348bde5e24f3fa79b3310b95e571893543df3fea6534b471f36e15792776790fd620d8b8735c392edfc28583fa751722fc4dce44757abb165198fa4599b6bd4c0023ece6269308769814b17842d48b7bdeb333c5d7ed0b07f0e8c3f3cafa3469dfa7f132b8b3bc3598104524aff2b8fc7cc970d37bd1b9f3edfeb02f78a7ff57338d4fa4d5da23dee2799f9f07ed0ffb14749df61d8a2faa8d6448468e72d390cc67f7ed127b046c22d589e31edde150bb06edd347790d94eb8adbeef77ff075272a99bcb97dd1d536f5b9d274ab4a407e0ed3c4f2abeadb6470887dac88624d6d0eb821706028e9af8ddad29e0bd8e5a9972309a1fbd6684eac07cdef874a18f230d39896f0ff3fbbdc82eaf3d844fcca0211a77c9cfa452d60f7da1a29129833e2444fb0aacd5f15b028ab52218895588585730be789de09f4a1618bd6e58981270a7f8c89e8f3bfe59a325f7a6ad21d0ad2d7a642874d2cf6d1cda33380d9bfbdc31866026d77167b3776bc26706a88efcb7f9cd820b2666a01ecf577058ff6879aeab406bd762cf739a06cba0bccd08283e654836360b1100282a7a531c0fc0ab4b925f00c238dab11339eab73be66f0464daf460995ecfc99d4a52548eedcc5a1fee8b6f4bb36257ef6f02188abcde68b75f7008a4268828d0a97c8c2712de74a79fa75e65eacca4db69a20cb27c3700da1abc2820b133e7f7464c1f1c6b5ae492dc9eb4427eb87f75c9e6b14d467fd60110a88e108b5050bac0db24c3303f9a5199bc57612e8b2a57960e73648fd4c7839fcb8777af865d11d0082233a7858cf3a2a3b006515b6c856c3ed085adce5364226ca2edf93943a036302eeaf6dfb58f7cb90cc4a7e288cb74f2c68d4b8efa8385d1a8460d53be45eed2526468b61983edbd5f70074ebedfc621c99f1ddc4cc00657f1d1f1f174cd3572a061be0bd68ba796d0a0b7562985557231100742fd09c9630f7fd0c419edc2dd305535658330ef15b7ba1b6322", 0x1000, &(0x7f0000002540), &(0x7f0000002580), &(0x7f00000025c0)="5a85da92dd0a2bae2a9f644f79eef88cc390d8b61402adf7ccbf8118")
r8 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x72d, 0x100, 0x8, 0x390}, &(0x7f0000000100)=<r9=>0x0, &(0x7f0000000280)=<r10=>0x0, &(0x7f00000004c0)=<r11=>0x0)
syz_ublk_add_dev(r8, r9, r10, r11, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r12=>0x0, '\x00', {0xffffffff, 0xffff, 0x90, &(0x7f0000000440)=@new_dev={0x1, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r13=>0x0)
syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x34, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x6}, 0x0, 0x0, 0x0})
r14 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63)
r15 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_DEL_MIF(r15, 0x29, 0xcb, 0x0, 0x38)
syz_ublk_setup_queues(r14, r13, &(0x7f0000000340)={0x0, 0x0, 0x10, 0x5, 0x2e3}, &(0x7f0000000580)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x880000, 0x20, 0x1000000, 0x4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xdd52, 0x8000, 0x2, 0x22a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f6d, 0x8c, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8af2, 0x2, 0x8, 0x9d7c}}], 0x1, &(0x7f00000014c0)={0x2e, 0x1f, 0x0, r14, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r12, '\x00', {0x1, 0x5, 0x0, 0x0}}, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
syz_io_uring_setup(0xf51, &(0x7f0000000580)={0x0, 0xbbda, 0x13500, 0x1, 0x2c0}, &(0x7f0000000240), &(0x7f0000000180), &(0x7f0000000000))

2.798307803s ago: executing program 0 (id=864):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r0 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000500)={0x0, 0x30b5, 0x0, 0x2, 0x377}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0, 0x0)
syz_ublk_add_dev(r0, r1, r2, 0x0, &(0x7f0000000200)={0x2e, 0x57, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x6, 0x845, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff}}}, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup(r3)
r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r5, 0x0, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x8000000004)
r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000100))
r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r9 = dup3(r8, r7, 0x0)
r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r10, 0x0)
prlimit64(0x0, 0x7, &(0x7f0000000140)={0xc, 0x8b}, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r10, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0))
ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@fd={0x66642a85, 0x0, r7}, @fd={0x66642a85, 0x0, r10}, @fd={0x66642a85, 0x0, r7}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})
writev(r6, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee0000000000000000020000", 0x56}, {&(0x7f00000001c0)="ee64", 0x2}], 0x2)
syz_clone3(&(0x7f00000005c0)={0xa00400, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x61)
r11 = epoll_create1(0x0)
epoll_pwait2(r11, &(0x7f0000000640)=[{}], 0x1, 0x0, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000080)={0x3, 0x40, 0xfa02, {{0x6000000, 0xfffe, 0x9, @mcast1, 0x4}, {0xa, 0x4e20, 0x7ffffffe, @ipv4={'\x00', '\xff\xff', @broadcast}, 0xa8a9}, 0xffffffffffffffff, 0x2}}, 0x48)
syz_ublk_setup_queues(r4, 0x0, &(0x7f0000000180)={0x0, 0x20fb87, 0x800, 0x3, 0x32d}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x15a, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ac7, 0x4000, 0x10000000, 0x546}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x4000, 0x2, 0xfffffffc}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xbd}}], 0x1, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67}, 0x94)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000300)="660f3880b6e1b7c12b660f3880080f78ace31b000000d8503a640f063e0f22a566f30f11eeb972080000b807000000ba000000000f30f3666436dcf2643e0f840d000000", 0x44}], 0x1, 0x0, 0x0, 0x0)

2.746992759s ago: executing program 3 (id=865):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000a8f4d0086d0492082a6d0000000109021b0001000000000904"], 0x0)
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r1, &(0x7f0000000000)=[{{&(0x7f00000000c0)={0xa, 0x4e22, 0x0, @private0, 0xfffffffd}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000140)='P', 0x1}], 0x1}}], 0x1, 0x40840)
connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @remote, 0x2}, 0x1c)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0)=0x3, 0xac5)
syz_clone3(&(0x7f0000000200)={0x23800000, &(0x7f0000000280)=<r2=>0xffffffffffffffff, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, 0x0}, 0x58)
io_setup(0x1, &(0x7f0000000340)=<r3=>0x0)
io_submit(r3, 0x1, &(0x7f0000000380)=[&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x5, 0x6, r2, 0x0}])
shutdown(r1, 0x1)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000080)={0x18, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$uac2(r0, 0x0, &(0x7f00000002c0)={0x44, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

2.279976919s ago: executing program 5 (id=867):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2b)
r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)=@o_path={&(0x7f0000000200)='./file0\x00', 0x0, 0x10, r1}, 0x18)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x0, 0x32, 0xea, &(0x7f0000000180)="8325c9ffff9f23d3e442ba573242f779d1f3f6dc5b909c2315094abf3eeb87c283aa08c9b1e125d415489d8ec8a3bf15678d", &(0x7f0000000540)=""/234, 0x9, 0x0, 0x2d, 0xf7, &(0x7f0000000a40)="cab2cd4769091f1ed0e7bf0d9bec5cb47f2126e67e7b767f9c2e650a8234daffff0322a1e04c541741b9fcf919", &(0x7f0000000440)="3095736cba92bee2a6b1c41194cc0b5c5f5625cfa8aba177224bfe08117381e8434cc1e39fd7a721d83658dcca010180ef3682b1d5af79a06a821aab21049fb5201f1c9a633b73baf2b1b1e9036fffd298a0232c20976879dbe037fd0b60ceabaad2453b6e47aa887b4dcaa3b153c7102b0a7069705b436ad559a77c25688065856ef348d10008871b4569fd2838c7ef992589f68afcc0c765acc56d2079960b40b9183850000000009dd0040000003790b3c7325c2fc4dd3525ccb3b820daef158516465736a043f71c44d7ae640c05fe7f9ebd389f77843c046a9412d887c3d8366f625f03e3c69f5bdd2c4a77664c88f9e4f5e3b20e", 0x6, 0x0, 0x2}, 0x50)
pselect6(0xffffffffffffff34, &(0x7f0000000380)={0x0, 0x3000000000000}, &(0x7f0000000680)={0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffffffff55b}, 0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000800)={[0x5]}, 0x8})
openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0x2d6081, 0x0)
ioctl$XFS_IOC_SET_RESBLKS(r2, 0xc0105872, &(0x7f0000000240)={0x1000, 0x7})
socket(0x2b, 0x1, 0x4)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
openat$dma_heap(0xffffffffffffff9c, &(0x7f00000001c0), 0x10000, 0x0)
syz_extract_tcp_res(&(0x7f0000000280), 0x4, 0xfffffffe)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r3)
fsopen(&(0x7f0000000340)='cgroup\x00', 0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000640)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0)
r4 = syz_io_uring_setup(0x111, &(0x7f00000000c0)={0x0, 0xcd9c, 0x2, 0x4, 0xdd}, &(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780))
io_uring_register$IORING_REGISTER_IOWQ_AFF(r4, 0x11, &(0x7f00000007c0)='n', 0x1)
io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(0xffffffffffffffff, 0x13, &(0x7f0000000080)=[0x5], 0x2)
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000840), 0x6605f6e25b12dd85, 0x0)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000008c0)='./binderfs/binder0\x00', 0x4, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000900))
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000940)='./binderfs/binder0\x00', 0x802, 0x0)
r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/bus/input/devices\x00', 0x0, 0x0)
readv(r7, &(0x7f0000000a80)=[{&(0x7f0000000b00)=""/242, 0xf2}, {&(0x7f0000000c00)=""/127, 0x7f}, {&(0x7f0000000c80)=""/194, 0xc2}, {&(0x7f0000000d80)=""/130, 0x82}, {&(0x7f0000000e40)=""/118, 0x76}, {0x0}, {&(0x7f0000000ec0)=""/235, 0xeb}], 0x7)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000980)={0x8, 0x0, &(0x7f00000009c0)=[@increfs], 0x0, 0x0, 0x0})
dup3(r6, r5, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000a00)='./binderfs/binder0\x00', 0x0, 0x0)

2.056919426s ago: executing program 1 (id=868):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x81, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1c)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e24, @loopback}, 0x10)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f00000001c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000200))
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000240)={'syzkaller0\x00', 0x1})
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x80}, 0x50)
r2 = syz_open_procfs(0x0, 0x0)
read$char_usb(r2, &(0x7f0000000300)=""/25, 0x19)
r3 = syz_ublk_setup_io_uring(0x64d, &(0x7f0000000340)={0x0, 0xd58c, 0x1000, 0x2, 0x14d}, &(0x7f00000003c0)=<r4=>0x0, &(0x7f0000000400)=<r5=>0x0, &(0x7f0000000440)=<r6=>0x0)
syz_io_uring_submit(r4, r5, r6, &(0x7f0000000480)=@IORING_OP_TIMEOUT={0xb, 0x12, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000500), 0x1, 0x40, 0x1})
syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000540)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000005c0)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000600)={0x0, 0x0})
r7 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0)
writev(r7, &(0x7f0000000840)=[{&(0x7f0000000880)="0e000000", 0x4}], 0x1)
getgroups(0x0, 0x0)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0)
r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000008c0), 0x0, 0x0)
r9 = syz_open_pts(r8, 0x8001)
write(r9, 0x0, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg$inet(r1, &(0x7f0000000100)=[{{&(0x7f0000000140)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000)
sendto$inet(r1, &(0x7f0000000180)="3293", 0xffffffffffffffe2, 0x84, 0x0, 0x0)
shutdown(r1, 0x1)
r10 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x426b40)
ioctl$OCFS2_IOC_GROUP_EXTEND(r10, 0x40046f01, &(0x7f0000000040)=0x1)

1.98664003s ago: executing program 0 (id=869):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x81, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1c)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e24, @loopback}, 0x10)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f00000001c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000200))
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000240)={'syzkaller0\x00', 0x1})
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x80}, 0x50)
r2 = syz_open_procfs(0x0, 0x0)
read$char_usb(r2, &(0x7f0000000300)=""/25, 0x19)
r3 = syz_ublk_setup_io_uring(0x64d, &(0x7f0000000340)={0x0, 0xd58c, 0x1000, 0x2, 0x14d}, &(0x7f00000003c0)=<r4=>0x0, &(0x7f0000000400)=<r5=>0x0, &(0x7f0000000440)=<r6=>0x0)
syz_io_uring_submit(r4, r5, r6, &(0x7f0000000480)=@IORING_OP_TIMEOUT={0xb, 0x12, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000500), 0x1, 0x40, 0x1})
syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000540)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000005c0)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000600)={0x0, 0x0})
writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f0000000880)="0e000000", 0x4}], 0x1)
getgroups(0x0, 0x0)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0)
r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000008c0), 0x0, 0x0)
ioctl$TCSETS(r7, 0x40045431, 0x0)
r8 = syz_open_pts(r7, 0x8001)
write(r8, 0x0, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg$inet(r1, &(0x7f0000000100)=[{{&(0x7f0000000140)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000)
sendto$inet(r1, &(0x7f0000000180)="3293", 0xffffffffffffffe2, 0x84, 0x0, 0x0)
shutdown(r1, 0x1)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x426b40)

1.895056832s ago: executing program 5 (id=870):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'geneve0\x00', <r3=>0x0})
sendto$packet(r1, &(0x7f00000003c0)="f4416eb4e859495d589fefa788a8", 0xe, 0x40000, &(0x7f0000000400)={0x11, 0xffff, r3, 0x1, 0x0, 0x6, @random="d68d10333f9a"}, 0x14)

1.700325732s ago: executing program 5 (id=871):
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0)
r0 = landlock_create_ruleset(&(0x7f0000000000)={0x0, 0x3}, 0x10, 0x0)
landlock_restrict_self(r0, 0x0)
landlock_restrict_self(r0, 0x0)
r1 = landlock_create_ruleset(&(0x7f0000000040)={0x6490, 0x1, 0x3}, 0x18, 0x0)
landlock_restrict_self(r1, 0x11)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
r3 = socket$igmp6(0xa, 0x3, 0x3a)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x40ead000)
madvise(&(0x7f0000130000/0xd000)=nil, 0xd000, 0x66)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19)
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000140)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
setsockopt$MRT6_ADD_MFC(r3, 0x29, 0x22, &(0x7f00000000c0)={{0xa, 0x0, 0x103, @empty}, {0xa, 0x4e22, 0x0, @dev, 0x3}, 0xfffe, {[0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0xfffffffd]}}, 0x5c)
sendto$inet(r2, 0x0, 0x0, 0x20008005, &(0x7f0000000080)={0x2, 0x4e20}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000068a000000000000040000001801000020696c2500000000002020207b1ad8ff000000007ba1000500000000040100000400ffffb702000008010200b703000002000000850000002e00000095"], &(0x7f00000002c0)='GPL\x00', 0x6, 0xffa, &(0x7f0000000980)=""/4090, 0x0, 0xa8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200000}, 0x94)

1.221410988s ago: executing program 5 (id=872):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@newtfilter={0x24, 0x11, 0xd27, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x74, r2, {0x4, 0xfff2}, {0xafabc05531515610, 0xd}, {0x8, 0x2}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x1c005}, 0x24048014)
r3 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000000380)={0x0, 0xffa1, &(0x7f0000000280)=[{&(0x7f0000000240)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602ffa100000e000a000f000000028000001294", 0x2e}], 0x1}, 0x40)

1.214312849s ago: executing program 4 (id=873):
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000240)='\x00', 0x89901)
r1 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000280))
mount_setattr(r0, &(0x7f00000002c0)='.\x00', 0x0, &(0x7f0000000300)={0x100000, 0x0, 0x0, {r1}}, 0x20)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0xc3}]}, &(0x7f00000001c0)='syzkaller\x00', 0x6, 0x8, &(0x7f0000000200)=""/41, 0x40f00, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000004c0)={0xc, 0x0, <r4=>0x0})
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f00000003c0)=[{0x0}, {0x0}, {&(0x7f0000000600)="8d522bd88978d6d9fa684ba45f4b6904000000000081a22d282b940c37da47000032fee1eafd787035349f20c099125068891e3cb5c6dbf58781aa0921593372580b46e81765cf77883ded322a64d168924adfdbe5017a14c70a7298650ca039fdf03b9de5adc76a7e045518e0c962a6eeb35fff9a625e86ed8cc45ad3847d43300ba185363cbefcd839f8ffffffffffffffa27e08fdad19ae1a6c11ee7f4f7601db96933b62b031", 0xa8}], 0x3}}], 0x1, 0x20d0)
r7 = dup(r6)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f00000006c0)={0x1ff, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000700)=[@text64={0x40, &(0x7f0000000740)="c4417d290ddada01ca48b8a9884315c2c245040f23c00f21f835000002000f23f8c4a2e0f3db0f07d2c74424001e09000000442402e4000000654c0fc72ef3410fc777d365420fc7700066b8502466ef", 0x6e}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r7, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@textreal={0x8, 0x0}], 0x1, 0x72, 0x0, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80386433, &(0x7f0000000800)=""/187)
ioctl$KVM_RUN(r8, 0xae80, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
getsockopt(r9, 0x1, 0xe, 0x0, &(0x7f0000000040))
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000500)={0x48, 0x2, r4})
r10 = fsopen(&(0x7f0000000000)='devpts\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r10, 0x6, 0x0, 0x0, 0x0)
fsmount(r10, 0x0, 0x1)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r10, 0x7, 0x0, 0x0, 0x0)
ioctl(r3, 0x3b8e, &(0x7f0000000580)="10")
ioctl(r3, 0x3b89, &(0x7f00000005c0)="3000000004000000030000000100000000000000000000000000000000000000000000000000000005")
close_range(r2, 0xffffffffffffffff, 0x0)

1.030396621s ago: executing program 1 (id=874):
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000940), 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000980)={0x0, 0x0, 0x0, 'queue0\x00'})
read$char_usb(0xffffffffffffffff, 0x0, 0x0)
r2 = syz_ublk_setup_io_uring(0x81b, &(0x7f0000000100)={0x0, 0x30b5, 0x400, 0x4001002, 0x372}, &(0x7f0000000180)=<r3=>0x0, &(0x7f00000001c0)=<r4=>0x0, &(0x7f0000000200)=<r5=>0x0)
syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000300)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000380)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f00000003c0)=<r6=>0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
r8 = dup(r7)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24044451}, 0x0)
r9 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, 0xffffffffffffffff, 0x0)
syz_ublk_setup_queues(r8, r6, &(0x7f0000000400)={0x0, 0x1, 0x3600, 0x2, 0x255}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb351, 0x400, 0x2100, 0x10000004, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0xfffffffe, 0x367}}], 0x1, &(0x7f0000000780)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0x2, 0x5e8, 0x0, 0x0}}, 0x0)
writev(r0, &(0x7f0000000000)=[{&(0x7f00000004c0)}], 0x1)

969.069539ms ago: executing program 0 (id=875):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a80), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000ac0)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010027bd7000ffffff252100000008000300", @ANYRES32=r4, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x46b2d3ba8e12a610}, 0x4008840)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000005f00)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000005c0)={0x2c, r1, 0xa01, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x865}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200000d0}, 0x4000)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000180)={<r7=>0x0}, &(0x7f00000001c0)=0xc)
syz_open_procfs(r7, &(0x7f0000000000)='fd/4\x00')
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net\x00')
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
fchdir(r8)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140), 0xf6, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0)
r9 = socket$kcm(0x29, 0x2, 0x0)
socket$inet6(0xa, 0x80000, 0x0)
sendmsg$kcm(r9, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x1)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB="34000000100001002abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="a22104000000000014000300776c616e30000000000000000000000060d0719d6b8c7598260d38e18e47c5e8950eb73d1c59dba1f5206e3557c154e1b892d5298702cee45ae898f041f75040293b547986a71e5b6ccc9fef78b7ed555e88d744c7f90dd9a6ffcee50611d59cf82af0db61fcf1a879706e6c83f7eba09097b7ce99635931cedba33f78ce7b243f5fc55b453567548ef138f62ee6c6ac123a8dabb17d729d883d8f"], 0x34}}, 0x0)

673.437551ms ago: executing program 5 (id=876):
r0 = socket$netlink(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0)
write(r1, &(0x7f0000000280)='0', 0x1)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, 0x0, 0x40)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0xffffff0f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x700}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x8}]}, 0x3c}}, 0x0)

623.25513ms ago: executing program 4 (id=877):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a80), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000ac0)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r3, 0x1, 0x70bd27, 0x25dedbff, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x46b2d3ba8e12a610}, 0x4008840)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000005f00)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000005c0)={0x2c, r1, 0xa01, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x865}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200000d0}, 0x4000)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0)
r7 = socket$kcm(0x29, 0x2, 0x0)
sendmsg$kcm(r7, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x1)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB="34000000100001002abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="a22104000000000014000300776c616e30000000000000000000000060d0719d6b8c7598260d38e18e47c5e8950eb73d1c59dba1f5206e3557c154e1b892d5298702cee45ae898f041f75040293b547986a71e5b6ccc9fef78b7ed555e88d744c7f90dd9a6ffcee50611d59cf82af0db61fcf1a879706e6c83f7eba09097b7ce99635931cedba33f78ce7b243f5fc55b453567548ef138f62ee6c6ac123a8dabb17d729d883d8f"], 0x34}}, 0x0) (fail_nth: 8)

440.548577ms ago: executing program 3 (id=878):
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000240)='\x00', 0x89901)
r1 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000280))
mount_setattr(r0, &(0x7f00000002c0)='.\x00', 0x0, &(0x7f0000000300)={0x100000, 0x0, 0x0, {r1}}, 0x20)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0xc3}]}, &(0x7f00000001c0)='syzkaller\x00', 0x6, 0x8, &(0x7f0000000200)=""/41, 0x40f00, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000004c0)={0xc, 0x0, <r4=>0x0})
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f00000003c0)=[{0x0}, {0x0}, {&(0x7f0000000600)="8d522bd88978d6d9fa684ba45f4b6904000000000081a22d282b940c37da47000032fee1eafd787035349f20c099125068891e3cb5c6dbf58781aa0921593372580b46e81765cf77883ded322a64d168924adfdbe5017a14c70a7298650ca039fdf03b9de5adc76a7e045518e0c962a6eeb35fff9a625e86ed8cc45ad3847d43300ba185363cbefcd839f8ffffffffffffffa27e08fdad19ae1a6c11ee7f4f7601db96933b62b031", 0xa8}], 0x3}}], 0x1, 0x20d0)
r7 = dup(r6)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f00000006c0)={0x1ff, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000700)=[@text64={0x40, &(0x7f0000000740)="c4417d290ddada01ca48b8a9884315c2c245040f23c00f21f835000002000f23f8c4a2e0f3db0f07d2c74424001e09000000442402e4000000654c0fc72ef3410fc777d365420fc7700066b8502466ef", 0x6e}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r7, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@textreal={0x8, 0x0}], 0x1, 0x72, 0x0, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80386433, &(0x7f0000000800)=""/187)
ioctl$KVM_RUN(r8, 0xae80, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
getsockopt(r9, 0x1, 0xe, 0x0, &(0x7f0000000040))
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000500)={0x48, 0x2, r4})
r10 = fsopen(&(0x7f0000000000)='devpts\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r10, 0x6, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x1, 0x4, &(0x7f0000000980)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0xffffffbc, 0x10}, [@ldst={0x7, 0xff05, 0x0, 0x0, 0xa}]}, &(0x7f00000009c0)='GPL\x00', 0x2, 0xc3, &(0x7f0000000a00)=""/195}, 0x94)
ioctl(r3, 0x3b8e, &(0x7f0000000580)="10")
ioctl(r3, 0x3b89, &(0x7f00000005c0)="3000000004000000030000000100000000000000000000000000000000000000000000000000000005")
close_range(r2, 0xffffffffffffffff, 0x0)

364.845063ms ago: executing program 5 (id=879):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_SWAP(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x34, 0x6, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x103}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x64616646de5a3693}, 0x40)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_int(r2, 0x29, 0x1a, 0x0, &(0x7f00000000c0))
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYRESHEX, @ANYRES64=0x0, @ANYBLOB="00000000141000001c00128009000100626f6e64000000000c00028005001f"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000)
r3 = socket$packet(0x11, 0x3, 0x300)
r4 = dup(r3)
r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
ioctl$int_in(r5, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000002c0)=""/51, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000300))
r6 = dup(r4)
ioctl$VHOST_NET_SET_BACKEND(r5, 0x4008af30, &(0x7f0000000380)={0x1, r6})
ioctl$VHOST_NET_SET_BACKEND(r5, 0x4008af30, &(0x7f00000003c0)={0x1, r4})
read$usbfs(r4, &(0x7f0000000400)=""/4096, 0x1000)

0s ago: executing program 4 (id=880):
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000340)={0x0, 0x0, <r0=>0xffffffffffffffff})
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0], 0x2, 0x80000, 0x0, <r1=>0xffffffffffffffff})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xf4, r2, 0x200, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x80000000, 0x27}}}}, [@NL80211_ATTR_IE={0xa4, 0x2a, [@fast_bss_trans={0x37, 0x65, {0x1, 0x1, "e914328d366af8d931e8792eb243cf79", "a6aef27c97ac63f294c90f66c4e5236f5b9c7fcf5d99d063a09f5bacb2c317eb", "bc09c5732e2495f9d9fb728abf022e67e0f7f9423420cad73c055f7aefa84ffd", [{0x4, 0x11, "4f443740cd7dc6d9ade8f177344ef41602"}]}}, @mic={0x8c, 0x18, {0xb2b, "bce632dfd62b", @long="c7ec52e2d37a87c6b03761ad87cf5a03"}}, @rann={0x7e, 0x15, {{0x1, 0x9}, 0x0, 0x0, @broadcast, 0x9, 0x1000, 0x40}}, @erp={0x2a, 0x1, {0x0, 0x1}}, @channel_switch={0x25, 0x3, {0x0, 0x2c, 0x9}}]}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x300, 0x0, 0x2, 0x0, {0x1, 0xe8, 0x0, 0xc, 0x0, 0x1}, 0x8, 0x10, 0x4}}, @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_MAC={0xa}]}, 0xf4}, 0x1, 0x0, 0x0, 0x4000814}, 0x1)
r3 = syz_open_dev$vim2m(&(0x7f0000000040), 0xf7f, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000000)={0xf0f002})
write(r1, &(0x7f0000000300)="d23edce25da42286b90dba6c1ffd703d170826921ef236d0e0fb9859ad7ab742f9170a026566", 0x26)

kernel console output (not intermixed with test programs):


[  169.173861][ T7642]  ? __pfx_proc_alloc_inode+0x10/0x10
[  169.173886][ T7642]  should_failslab+0xa8/0x100
[  169.173914][ T7642]  ? __pfx_proc_alloc_inode+0x10/0x10
[  169.173936][ T7642]  kmem_cache_alloc_lru_noprof+0xa7/0x5f0
[  169.173961][ T7642]  ? proc_alloc_inode+0x2a/0xc0
[  169.173983][ T7642]  ? proc_alloc_inode+0x2a/0xc0
[  169.174011][ T7642]  ? __pfx_proc_alloc_inode+0x10/0x10
[  169.174033][ T7642]  proc_alloc_inode+0x2a/0xc0
[  169.174057][ T7642]  alloc_inode+0x6a/0x1b0
[  169.174085][ T7642]  new_inode+0x1f/0x170
[  169.174112][ T7642]  ? proc_get_inode+0x1a/0x6a0
[  169.174139][ T7642]  proc_get_inode+0x22/0x6a0
[  169.174166][ T7642]  proc_lookup_de+0x251/0x340
[  169.174196][ T7642]  __lookup_slow+0x1fb/0x2f0
[  169.174220][ T7642]  lookup_slow+0x53/0x70
[  169.174243][ T7642]  link_path_walk+0xd2a/0x1910
[  169.174281][ T7642]  path_openat+0x1c9/0x1d60
[  169.174323][ T7642]  do_file_open+0x23e/0x4a0
[  169.174351][ T7642]  ? __pfx_do_file_open+0x10/0x10
[  169.174395][ T7642]  ? _raw_spin_unlock+0x28/0x50
[  169.174414][ T7642]  ? alloc_fd+0x651/0x6c0
[  169.174452][ T7642]  do_sys_openat2+0x115/0x200
[  169.174482][ T7642]  ? __pfx_do_sys_openat2+0x10/0x10
[  169.174510][ T7642]  ? ksys_write+0x242/0x270
[  169.174533][ T7642]  ? __pfx_ksys_write+0x10/0x10
[  169.174557][ T7642]  __x64_sys_openat+0x138/0x170
[  169.174595][ T7642]  do_syscall_64+0x166/0x520
[  169.174617][ T7642]  ? trace_irq_disable+0x3b/0x140
[  169.174639][ T7642]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  169.174659][ T7642]  ? clear_bhb_loop+0x70/0xc0
[  169.174684][ T7642]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  169.174703][ T7642] RIP: 0033:0x7f8f8719e1d9
[  169.174722][ T7642] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  169.174739][ T7642] RSP: 002b:00007f8f853f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  169.174760][ T7642] RAX: ffffffffffffffda RBX: 00007f8f87425fa0 RCX: 00007f8f8719e1d9
[  169.174774][ T7642] RDX: 0000000000020a80 RSI: 0000200000000c00 RDI: 0000000000000003
[  169.174786][ T7642] RBP: 00007f8f853f6090 R08: 0000000000000000 R09: 0000000000000000
[  169.174798][ T7642] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  169.174808][ T7642] R13: 00007f8f87426038 R14: 00007f8f87425fa0 R15: 00007f8f8754fa48
[  169.174839][ T7642]  </TASK>
[  169.623296][ T7645] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  169.731589][ T1987] vhci_hcd vhci_hcd.0: vhci_device speed not set
[  170.098647][ T5688] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  170.239494][   T30] kauditd_printk_skb: 90 callbacks suppressed
[  170.239513][   T30] audit: type=1326 audit(1791832455.815:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7660 comm="syz.0.527" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f516ad9e1d9 code=0x0
[  170.251008][ T5688] usb 5-1: Using ep0 maxpacket: 16
[  170.251730][ T5688] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=76.fe
[  170.254381][ T5688] usb 5-1: config 4 has an invalid interface number: 9 but max is 0
[  170.254404][ T5688] usb 5-1: config 4 has no interface number 0
[  170.254442][ T5688] usb 5-1: config 4 interface 9 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  170.254494][ T5688] usb 5-1: config 4 interface 9 altsetting 2 bulk endpoint 0x84 has invalid maxpacket 64
[  170.254516][ T5688] usb 5-1: config 4 interface 9 has no altsetting 0
[  170.257951][ T5688] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  170.257974][ T5688] usb 5-1: Product: syz
[  170.257988][ T5688] usb 5-1: Manufacturer: syz
[  170.258023][ T5688] usb 5-1: SerialNumber: syz
[  170.283259][ T7650] raw-gadget.7 gadget.4: fail, usb_ep_enable returned -22
[  170.283419][ T7650] raw-gadget.7 gadget.4: fail, usb_ep_enable returned -22
[  170.315967][ T7663] FAULT_INJECTION: forcing a failure.
[  170.315967][ T7663] name failslab, interval 1, probability 0, space 0, times 0
[  170.316002][ T7663] CPU: 0 UID: 0 PID: 7663 Comm: syz.0.527 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  170.316027][ T7663] Tainted: [L]=SOFTLOCKUP
[  170.316037][ T7663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  170.316048][ T7663] Call Trace:
[  170.316055][ T7663]  <TASK>
[  170.316064][ T7663]  dump_stack_lvl+0xe8/0x150
[  170.316095][ T7663]  should_fail_ex+0x410/0x560
[  170.316127][ T7663]  should_failslab+0xa8/0x100
[  170.316152][ T7663]  ? security_file_alloc+0x34/0x310
[  170.316176][ T7663]  kmem_cache_alloc_noprof+0xa1/0x600
[  170.316196][ T7663]  ? rcu_is_watching+0x16/0xb0
[  170.316220][ T7663]  ? security_file_alloc+0x34/0x310
[  170.316249][ T7663]  security_file_alloc+0x34/0x310
[  170.316273][ T7663]  init_file+0x90/0x2b0
[  170.316301][ T7663]  alloc_empty_file+0x74/0x1d0
[  170.316326][ T7663]  path_openat+0xa2/0x1d60
[  170.316354][ T7663]  ? __lock_acquire+0x747/0x2de0
[  170.316385][ T7663]  do_file_open+0x23e/0x4a0
[  170.316410][ T7663]  ? __pfx_do_file_open+0x10/0x10
[  170.316451][ T7663]  ? _raw_spin_unlock+0x28/0x50
[  170.316469][ T7663]  ? alloc_fd+0x651/0x6c0
[  170.316510][ T7663]  do_sys_openat2+0x115/0x200
[  170.316539][ T7663]  ? __pfx_do_sys_openat2+0x10/0x10
[  170.316566][ T7663]  ? ksys_write+0x242/0x270
[  170.316587][ T7663]  ? __pfx_ksys_write+0x10/0x10
[  170.316610][ T7663]  __x64_sys_openat+0x138/0x170
[  170.316640][ T7663]  do_syscall_64+0x166/0x520
[  170.316660][ T7663]  ? trace_irq_disable+0x3b/0x140
[  170.316681][ T7663]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  170.316701][ T7663]  ? clear_bhb_loop+0x70/0xc0
[  170.316723][ T7663]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  170.316742][ T7663] RIP: 0033:0x7f516ad5ea0e
[  170.316760][ T7663] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  170.316776][ T7663] RSP: 002b:00007f516bc45ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  170.316797][ T7663] RAX: ffffffffffffffda RBX: 00007f516bc466c0 RCX: 00007f516ad5ea0e
[  170.316810][ T7663] RDX: 0000000000000002 RSI: 00007f516bc45f90 RDI: ffffffffffffff9c
[  170.316823][ T7663] RBP: 00007f516bc46090 R08: 0000000000000000 R09: 0000000000000000
[  170.316835][ T7663] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  170.316846][ T7663] R13: 00007f516b026128 R14: 00007f516b026090 R15: 00007f516b14fa48
[  170.316876][ T7663]  </TASK>
[  170.335286][ T5688] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  170.423397][ T5350] usb 6-1: USB disconnect, device number 2
[  170.490114][   T25] usb 4-1: new full-speed USB device number 24 using dummy_hcd
[  170.650018][   T25] usb 4-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f
[  170.654693][   T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  170.654717][   T25] usb 4-1: Product: syz
[  170.654731][   T25] usb 4-1: Manufacturer: syz
[  170.654744][   T25] usb 4-1: SerialNumber: syz
[  170.663891][   T25] usb 4-1: config 0 descriptor??
[  170.677176][   T25] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state.
[  170.677572][   T25] dvb-usb: bulk message failed: -22 (4/0)
[  170.677588][   T25] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  170.683266][   T25] dvb-usb: bulk message failed: -22 (5/0)
[  170.683284][   T25] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  170.705669][ T7670] tipc: Can't bind to reserved service type 1
[  170.722468][   T25] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  170.725535][ T7669] netlink: 12 bytes leftover after parsing attributes in process `syz.5.528'.
[  170.740972][   T25] dvb-usb: Pinnacle 450e DVB-S USB2.0 error while loading driver (-19)
[  170.806898][ T5675] usb 2-1: Audio class v2/v3 interfaces need an interface association
[  170.898250][   T30] audit: type=1326 audit(1791832456.465:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7672 comm="syz.5.530" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd282f9e1d9 code=0x7ffc0000
[  170.898300][   T30] audit: type=1326 audit(1791832456.465:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7672 comm="syz.5.530" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd282f9e1d9 code=0x7ffc0000
[  170.914531][   T30] audit: type=1326 audit(1791832456.475:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7672 comm="syz.5.530" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd282f9e1d9 code=0x7ffc0000
[  170.914579][   T30] audit: type=1326 audit(1791832456.475:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7672 comm="syz.5.530" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd282f9e1d9 code=0x7ffc0000
[  170.915027][   T30] audit: type=1326 audit(1791832456.475:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7672 comm="syz.5.530" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fd282f9e1d9 code=0x7ffc0000
[  170.915067][   T30] audit: type=1326 audit(1791832456.475:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7672 comm="syz.5.530" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd282f9e1d9 code=0x7ffc0000
[  170.915103][   T30] audit: type=1326 audit(1791832456.475:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7672 comm="syz.5.530" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd282f9e1d9 code=0x7ffc0000
[  170.918296][   T30] audit: type=1326 audit(1791832456.475:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7672 comm="syz.5.530" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd282f9e1d9 code=0x7ffc0000
[  170.918649][   T30] audit: type=1326 audit(1791832456.475:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7672 comm="syz.5.530" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd282f9e1d9 code=0x7ffc0000
[  170.956325][ T7658] sch_tbf: burst 32854 is lower than device lo mtu (65550) !
[  171.003979][ T7673] fuse: fd is not a fuse device
[  171.142850][ T5675] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22
[  171.167711][ T5675] usb 2-1: USB disconnect, device number 28
[  171.203146][ T5918] udevd[5918]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  171.301524][ T5688] usb 4-1: USB disconnect, device number 24
[  171.383746][    T9] usb 5-1: USB disconnect, device number 22
[  171.387214][ T5912] usb 5-1: Failed to submit usb control message: -71
[  171.387235][ T5912] usb 5-1: unable to send the bmi data to the device: -71
[  171.387245][ T5912] usb 5-1: unable to get target info from device
[  171.398187][ T5912] usb 5-1: could not get target info (-71)
[  171.398222][ T5912] usb 5-1: could not probe fw (-71)
[  171.490849][ T5675] usb 2-1: new high-speed USB device number 29 using dummy_hcd
[  171.644530][ T5675] usb 2-1: Using ep0 maxpacket: 8
[  171.646041][ T5675] usb 2-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40
[  171.788430][   T25] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  171.938656][   T25] usb 6-1: Using ep0 maxpacket: 16
[  171.941193][   T25] usb 6-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice= 0.40
[  171.969368][ T7688] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  171.973332][   T25] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  171.973357][   T25] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  172.024148][   T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  172.024177][   T25] usb 6-1: Product: syz
[  172.024192][   T25] usb 6-1: Manufacturer: syz
[  172.024206][   T25] usb 6-1: SerialNumber: syz
[  172.203494][ T1987] hid_parser_main: 293 callbacks suppressed
[  172.203518][ T1987] hid-generic 0000:0000:0004.0019: unknown main item tag 0x0
[  172.203552][ T1987] hid-generic 0000:0000:0004.0019: unknown main item tag 0x0
[  172.208063][ T1987] hid-generic 0000:0000:0004.0019: unknown main item tag 0x0
[  172.208096][ T1987] hid-generic 0000:0000:0004.0019: unknown main item tag 0x0
[  172.208126][ T1987] hid-generic 0000:0000:0004.0019: unknown main item tag 0x0
[  172.208176][ T1987] hid-generic 0000:0000:0004.0019: unknown main item tag 0x0
[  172.208202][ T1987] hid-generic 0000:0000:0004.0019: unknown main item tag 0x0
[  172.208227][ T1987] hid-generic 0000:0000:0004.0019: unknown main item tag 0x0
[  172.208253][ T1987] hid-generic 0000:0000:0004.0019: unknown main item tag 0x0
[  172.210828][ T1987] hid-generic 0000:0000:0004.0019: unknown main item tag 0x0
[  172.228634][ T1987] hid-generic 0000:0000:0004.0019: hidraw0: <UNKNOWN> HID v0.03 Device [syz1] on syz0
[  172.453166][ T7694] input: syz1 as /devices/virtual/input/input12
[  172.545283][ T7673] warning: `syz.5.530' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  172.748612][ T5702] wacom 0003:056A:003F.001A: hidraw1: USB HID v0.00 Gamepad [syz0] on syz0
[  173.044428][ T7708] ip_tables: iptables: counters copy to user failed while replacing table
[  173.162205][ T7704] fido_id[7704]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  173.317740][   T25] usb 6-1: 1:1 : no or invalid class specific endpoint descriptor
[  173.318838][   T25] usb 6-1: 1:1: invalid format type 0x1002 is detected, processed as PCM
[  173.318976][   T25] usb 6-1: 1:1 : invalid UAC_FORMAT_TYPE desc
[  173.319856][   T25] usb 6-1: 0:2 : does not exist
[  173.416247][   T25] usb 6-1: USB disconnect, device number 3
[  173.540957][ T5918] udevd[5918]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  173.759993][ T5675] usb 2-1: string descriptor 0 read error: -71
[  173.760095][ T5675] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  173.806833][ T5675] usb 2-1: can't set config #1, error -71
[  173.840555][ T5675] usb 2-1: USB disconnect, device number 29
[  173.966491][ T7722] FAULT_INJECTION: forcing a failure.
[  173.966491][ T7722] name failslab, interval 1, probability 0, space 0, times 0
[  173.966513][ T7722] CPU: 0 UID: 0 PID: 7722 Comm: syz.1.540 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  173.966528][ T7722] Tainted: [L]=SOFTLOCKUP
[  173.966532][ T7722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  173.966539][ T7722] Call Trace:
[  173.966543][ T7722]  <TASK>
[  173.966548][ T7722]  dump_stack_lvl+0xe8/0x150
[  173.966568][ T7722]  should_fail_ex+0x410/0x560
[  173.966587][ T7722]  should_failslab+0xa8/0x100
[  173.966603][ T7722]  __kmalloc_cache_noprof+0xa3/0x600
[  173.966616][ T7722]  ? dev_ethtool+0x13f/0x29e0
[  173.966631][ T7722]  ? dev_ethtool+0x13f/0x29e0
[  173.966648][ T7722]  dev_ethtool+0x13f/0x29e0
[  173.966662][ T7722]  ? __lock_acquire+0x747/0x2de0
[  173.966681][ T7722]  ? __pfx_dev_ethtool+0x10/0x10
[  173.966696][ T7722]  ? kasan_quarantine_put+0xbb/0x1f0
[  173.966715][ T7722]  ? lock_acquire+0x115/0x350
[  173.966731][ T7722]  ? dev_load+0x21/0x1f0
[  173.966747][ T7722]  ? dev_load+0x21/0x1f0
[  173.966763][ T7722]  dev_ioctl+0x392/0x1150
[  173.966780][ T7722]  sock_do_ioctl+0x23e/0x320
[  173.966796][ T7722]  ? __pfx_sock_do_ioctl+0x10/0x10
[  173.966808][ T7722]  ? hook_file_ioctl+0x1f2/0x600
[  173.966830][ T7722]  sock_ioctl+0x57a/0x7e0
[  173.966844][ T7722]  ? __pfx_sock_ioctl+0x10/0x10
[  173.966857][ T7722]  ? __fget_files+0x2a/0x420
[  173.966875][ T7722]  ? __fget_files+0x3a2/0x420
[  173.966884][ T7722]  ? __fget_files+0x2a/0x420
[  173.966895][ T7722]  ? bpf_lsm_file_ioctl+0x9/0x20
[  173.966906][ T7722]  ? __pfx_sock_ioctl+0x10/0x10
[  173.966918][ T7722]  __se_sys_ioctl+0xfc/0x170
[  173.966932][ T7722]  do_syscall_64+0x166/0x520
[  173.966944][ T7722]  ? trace_irq_disable+0x3b/0x140
[  173.966957][ T7722]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  173.966967][ T7722]  ? clear_bhb_loop+0x70/0xc0
[  173.966980][ T7722]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  173.966991][ T7722] RIP: 0033:0x7fc62019e1d9
[  173.967001][ T7722] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  173.967011][ T7722] RSP: 002b:00007fc6210a9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  173.967023][ T7722] RAX: ffffffffffffffda RBX: 00007fc620425fa0 RCX: 00007fc62019e1d9
[  173.967031][ T7722] RDX: 0000200000000180 RSI: 0000000000008946 RDI: 0000000000000003
[  173.967038][ T7722] RBP: 00007fc6210a9090 R08: 0000000000000000 R09: 0000000000000000
[  173.967045][ T7722] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  173.967055][ T7722] R13: 00007fc620426038 R14: 00007fc620425fa0 R15: 00007fc62054fa48
[  173.967081][ T7722]  </TASK>
[  174.261417][ T7724] syzkaller1: entered promiscuous mode
[  174.261441][ T7724] syzkaller1: entered allmulticast mode
[  174.658519][    T9] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  174.808468][    T9] usb 6-1: Using ep0 maxpacket: 8
[  174.815158][    T9] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  174.816951][    T9] usb 6-1: config 1 has an invalid descriptor of length 177, skipping remainder of the config
[  174.816974][    T9] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2
[  174.817005][    T9] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  174.817028][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  174.887190][    T9] hub 6-1:1.0: bad descriptor, ignoring hub
[  174.887209][    T9] hub 6-1:1.0: probe with driver hub failed with error -5
[  174.887517][    T9] cdc_wdm 6-1:1.0: skipping garbage
[  174.887530][    T9] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22
[  175.211399][ T7734] binder: 7732:7734 ioctl c0306201 200000000280 returned -22
[  175.213039][ T7734] binder: 7732:7734 ioctl 401070c9 200000000300 returned -22
[  175.213171][ T7734] binder: 7732:7734 ioctl 7a0 200000000340 returned -22
[  175.330461][ T5702] usb 6-1: USB disconnect, device number 4
[  175.658824][   T44] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  175.719348][ T5702] hid-generic 0000:0000:0004.001B: hidraw0: <UNKNOWN> HID v0.03 Device [syz1] on syz0
[  175.828438][   T44] usb 6-1: Using ep0 maxpacket: 8
[  175.830408][   T44] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  175.831348][   T44] usb 6-1: config 1 has an invalid descriptor of length 177, skipping remainder of the config
[  175.831362][   T44] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2
[  175.831386][   T44] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  175.831408][   T44] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  175.920476][   T44] hub 6-1:1.0: bad descriptor, ignoring hub
[  175.920493][   T44] hub 6-1:1.0: probe with driver hub failed with error -5
[  175.920798][   T44] cdc_wdm 6-1:1.0: skipping garbage
[  175.920810][   T44] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22
[  176.238739][   T44] usb 6-1: USB disconnect, device number 5
[  176.450969][ T7761] FAULT_INJECTION: forcing a failure.
[  176.450969][ T7761] name failslab, interval 1, probability 0, space 0, times 0
[  176.451005][ T7761] CPU: 0 UID: 0 PID: 7761 Comm: syz.0.546 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  176.451031][ T7761] Tainted: [L]=SOFTLOCKUP
[  176.451038][ T7761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  176.451050][ T7761] Call Trace:
[  176.451057][ T7761]  <TASK>
[  176.451066][ T7761]  dump_stack_lvl+0xe8/0x150
[  176.451099][ T7761]  should_fail_ex+0x410/0x560
[  176.451131][ T7761]  should_failslab+0xa8/0x100
[  176.451164][ T7761]  ? __kernfs_new_node+0xe6/0x980
[  176.451189][ T7761]  kmem_cache_alloc_noprof+0xa1/0x600
[  176.451216][ T7761]  ? __kernfs_new_node+0xe6/0x980
[  176.451245][ T7761]  __kernfs_new_node+0xe6/0x980
[  176.451277][ T7761]  ? __pfx___kernfs_new_node+0x10/0x10
[  176.451301][ T7761]  ? kernfs_root+0x1c/0x230
[  176.451329][ T7761]  ? kernfs_root+0x1c/0x230
[  176.451350][ T7761]  ? kernfs_root+0x1c/0x230
[  176.451369][ T7761]  ? kernfs_root+0x1c/0x230
[  176.451395][ T7761]  kernfs_new_node+0xea/0x140
[  176.451423][ T7761]  __kernfs_create_file+0x4b/0x2e0
[  176.451453][ T7761]  sysfs_add_file_mode_ns+0x237/0x300
[  176.451491][ T7761]  internal_create_group+0x679/0x1180
[  176.451528][ T7761]  ? __pfx_internal_create_group+0x10/0x10
[  176.451554][ T7761]  ? up_write+0x19d/0x4a0
[  176.451584][ T7761]  sysfs_create_groups+0x59/0x120
[  176.451609][ T7761]  device_add_attrs+0x1b1/0x600
[  176.451637][ T7761]  ? __pfx_device_add_attrs+0x10/0x10
[  176.451667][ T7761]  ? device_add_class_symlinks+0x21f/0x240
[  176.451696][ T7761]  device_add+0x488/0xb80
[  176.451724][ T7761]  wakeup_source_sysfs_add+0x1d3/0x2c0
[  176.451756][ T7761]  wakeup_source_register+0x17f/0x380
[  176.451785][ T7761]  device_wakeup_enable+0xd0/0x260
[  176.451811][ T7761]  usb_hcd_submit_urb+0xdd9/0x1b60
[  176.451842][ T7761]  usbfs_start_wait_urb+0x166/0x470
[  176.451868][ T7761]  ? __pfx_usbfs_start_wait_urb+0x10/0x10
[  176.451899][ T7761]  ? do_proc_control+0x208/0xe80
[  176.451920][ T7761]  ? do_proc_control+0x208/0xe80
[  176.451941][ T7761]  ? snoop_urb+0x32/0x1f0
[  176.451966][ T7761]  do_proc_control+0x7c0/0xe80
[  176.452000][ T7761]  proc_control_compat+0x137/0x190
[  176.452027][ T7761]  ? __pfx_proc_control_compat+0x10/0x10
[  176.452063][ T7761]  usbdev_ioctl+0x13c9/0x2120
[  176.452090][ T7761]  ? __pfx_usbdev_ioctl+0x10/0x10
[  176.452110][ T7761]  ? __fget_files+0x2a/0x420
[  176.452127][ T7761]  ? __fget_files+0x3a2/0x420
[  176.452145][ T7761]  ? __fget_files+0x2a/0x420
[  176.452172][ T7761]  ? bpf_lsm_file_ioctl+0x9/0x20
[  176.452192][ T7761]  ? __pfx_usbdev_ioctl+0x10/0x10
[  176.452214][ T7761]  __se_sys_ioctl+0xfc/0x170
[  176.452240][ T7761]  do_syscall_64+0x166/0x520
[  176.452261][ T7761]  ? trace_irq_disable+0x3b/0x140
[  176.452283][ T7761]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  176.452304][ T7761]  ? clear_bhb_loop+0x70/0xc0
[  176.452328][ T7761]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  176.452347][ T7761] RIP: 0033:0x7f516ad9e1d9
[  176.452366][ T7761] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  176.452383][ T7761] RSP: 002b:00007f516bc67028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  176.452405][ T7761] RAX: ffffffffffffffda RBX: 00007f516b025fa0 RCX: 00007f516ad9e1d9
[  176.452420][ T7761] RDX: 0000200000000080 RSI: 00000000c0105500 RDI: 0000000000000003
[  176.452434][ T7761] RBP: 00007f516bc67090 R08: 0000000000000000 R09: 0000000000000000
[  176.452446][ T7761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  176.452458][ T7761] R13: 00007f516b026038 R14: 00007f516b025fa0 R15: 00007f516b14fa48
[  176.452489][ T7761]  </TASK>
[  177.158114][ T7779] tipc: Failed to remove unknown binding: 66,0,0/0:3119714529/3119714530
[  177.440080][ T7794] binder: 7792:7794 ioctl c0306201 0 returned -14
[  177.492539][ T7796] binder: 7792:7796 ioctl c0306201 0 returned -14
[  177.678889][ T5675] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  177.831917][   T44] hid_parser_main: 192 callbacks suppressed
[  177.831936][   T44] hid-generic 0000:0000:0004.001C: unknown main item tag 0x0
[  177.831954][   T44] hid-generic 0000:0000:0004.001C: unknown main item tag 0x0
[  177.831969][   T44] hid-generic 0000:0000:0004.001C: unknown main item tag 0x0
[  177.831984][   T44] hid-generic 0000:0000:0004.001C: unknown main item tag 0x0
[  177.831998][   T44] hid-generic 0000:0000:0004.001C: unknown main item tag 0x0
[  177.832013][   T44] hid-generic 0000:0000:0004.001C: unknown main item tag 0x0
[  177.832027][   T44] hid-generic 0000:0000:0004.001C: unknown main item tag 0x0
[  177.832044][   T44] hid-generic 0000:0000:0004.001C: unknown main item tag 0x0
[  177.832058][   T44] hid-generic 0000:0000:0004.001C: unknown main item tag 0x0
[  177.832073][   T44] hid-generic 0000:0000:0004.001C: unknown main item tag 0x0
[  177.850559][   T44] hid-generic 0000:0000:0004.001C: hidraw0: <UNKNOWN> HID v0.03 Device [syz1] on syz0
[  177.856800][ T5675] usb 6-1: Using ep0 maxpacket: 16
[  177.872747][ T5675] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  177.896733][ T5675] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  177.896786][ T5675] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  177.896812][ T5675] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  177.896833][ T5675] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  177.896854][ T5675] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  177.921054][ T5675] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  177.921081][ T5675] usb 6-1: Manufacturer: syz
[  178.030005][ T5675] usb 6-1: config 0 descriptor??
[  178.490871][ T5675] rc_core: IR keymap rc-hauppauge not found
[  178.497779][ T5675] Registered IR keymap rc-empty
[  178.513110][ T5675] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  178.529350][ T5675] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  178.585538][ T5675] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0
[  178.603478][ T5675] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input18
[  178.636329][ T5675] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  178.649366][ T5675] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  178.668524][ T5675] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  178.698591][    T9] usb 1-1: new high-speed USB device number 28 using dummy_hcd
[  178.699913][ T5675] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  178.724765][ T5675] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  178.738467][ T5675] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  178.759704][ T5675] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  178.778524][ T5675] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  178.798860][ T5675] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  178.818689][ T5675] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  178.838599][    T9] usb 1-1: device descriptor read/64, error -71
[  178.845805][ T5675] mceusb 6-1:0.0: Registered  with mce emulator interface version 1
[  178.845850][ T5675] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  179.042315][ T7831] sctp: [Deprecated]: syz.1.561 (pid 7831) Use of struct sctp_assoc_value in delayed_ack socket option.
[  179.042315][ T7831] Use struct sctp_sack_info instead
[  179.089984][    T9] usb 1-1: new high-speed USB device number 29 using dummy_hcd
[  179.238779][    T9] usb 1-1: device descriptor read/64, error -71
[  179.351853][    T9] usb usb1-port1: attempt power cycle
[  179.417079][ T7837] FAULT_INJECTION: forcing a failure.
[  179.417079][ T7837] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  179.417116][ T7837] CPU: 1 UID: 0 PID: 7837 Comm: syz.1.562 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  179.417143][ T7837] Tainted: [L]=SOFTLOCKUP
[  179.417150][ T7837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  179.417161][ T7837] Call Trace:
[  179.417169][ T7837]  <TASK>
[  179.417178][ T7837]  dump_stack_lvl+0xe8/0x150
[  179.417210][ T7837]  should_fail_ex+0x410/0x560
[  179.417243][ T7837]  _copy_from_user+0x2d/0xb0
[  179.417263][ T7837]  __sys_sendto+0x2a9/0x5a0
[  179.417296][ T7837]  ? __pfx___sys_sendto+0x10/0x10
[  179.417352][ T7837]  ? do_user_addr_fault+0xc4c/0x1340
[  179.417376][ T7837]  __x64_sys_sendto+0xde/0x100
[  179.417398][ T7837]  do_syscall_64+0x166/0x520
[  179.417418][ T7837]  ? trace_irq_disable+0x3b/0x140
[  179.417439][ T7837]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  179.417459][ T7837]  ? clear_bhb_loop+0x70/0xc0
[  179.417481][ T7837]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  179.417501][ T7837] RIP: 0033:0x7fc62015ea0e
[  179.417518][ T7837] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  179.417535][ T7837] RSP: 002b:00007fc6210a7e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  179.417557][ T7837] RAX: ffffffffffffffda RBX: 00007fc6210a96c0 RCX: 00007fc62015ea0e
[  179.417572][ T7837] RDX: 0000000000000020 RSI: 00007fc6210a8000 RDI: 0000000000000003
[  179.417585][ T7837] RBP: 0000000000000000 R08: 00007fc6210a7f04 R09: 000000000000000c
[  179.417598][ T7837] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003
[  179.417610][ T7837] R13: 00007fc6210a7f58 R14: 00007fc6210a8000 R15: 0000000000000000
[  179.417639][ T7837]  </TASK>
[  179.770626][    T9] usb 1-1: new high-speed USB device number 30 using dummy_hcd
[  179.800001][    T9] usb 1-1: device descriptor read/8, error -71
[  179.978550][   T44] usb 2-1: new high-speed USB device number 30 using dummy_hcd
[  180.048847][    T9] usb 1-1: new high-speed USB device number 31 using dummy_hcd
[  180.073446][    T9] usb 1-1: device descriptor read/8, error -71
[  180.130579][   T44] usb 2-1: Using ep0 maxpacket: 8
[  180.131258][   T44] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  180.133532][   T44] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  180.133572][   T44] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  180.142333][   T44] usb 2-1: config 0 descriptor??
[  180.186333][    T9] usb usb1-port1: unable to enumerate USB device
[  180.290146][ T7855] netdevsim netdevsim5: Firmware load for './file0/file0/..' refused, path contains '..' component
[  180.426073][   T44] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  180.572348][ T7865] netlink: 'syz.4.568': attribute type 1 has an invalid length.
[  180.667692][ T7865] bond1: entered promiscuous mode
[  180.683303][ T7865] 8021q: adding VLAN 0 to HW filter on device bond1
[  180.887578][ T7865] 8021q: adding VLAN 0 to HW filter on device bond1
[  180.894397][ T7865] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address
[  180.894421][ T7865] bond1: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[  181.044006][ T7865] bond1: (slave wireguard0): making interface the new active one
[  181.044034][ T7865] wireguard0: entered promiscuous mode
[  181.062377][ T7865] bond1: (slave wireguard0): Enslaving as an active interface with an up link
[  181.512837][ T7888] netlink: 4 bytes leftover after parsing attributes in process `syz.4.571'.
[  181.714836][  T148] IPVS: starting estimator thread 0...
[  181.799667][ T7893] IPVS: using max 28 ests per chain, 67200 per kthread
[  181.863745][ T7895] tipc: Started in network mode
[  181.863768][ T7895] tipc: Node identity 8aa8d292a36a, cluster identity 4711
[  181.863899][ T7895] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  181.940620][ T7894] syzkaller0: entered promiscuous mode
[  181.940643][ T7894] syzkaller0: entered allmulticast mode
[  182.015548][ T7894] tipc: Resetting bearer <eth:syzkaller0>
[  182.092244][ T7892] tipc: Resetting bearer <eth:syzkaller0>
[  182.243657][ T7892] tipc: Disabling bearer <eth:syzkaller0>
[  182.348504][   T25] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[  182.499455][   T25] usb 5-1: Using ep0 maxpacket: 32
[  182.502331][   T25] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  182.505895][   T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  182.505928][   T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  182.505965][   T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  182.548281][   T25] usb 5-1: config 0 descriptor??
[  182.586690][   T25] hub 5-1:0.0: USB hub found
[  182.804135][   T25] hub 5-1:0.0: config failed, can't read hub descriptor (err -22)
[  182.861289][   T25] usbhid 5-1:0.0: can't add hid device: -71
[  182.861411][   T25] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  182.916958][   T25] usb 5-1: USB disconnect, device number 23
[  183.191068][ T7919] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  183.191445][ T7919] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  183.237086][ T7919] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  183.237538][ T7919] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  183.436343][   T25] usb 2-1: USB disconnect, device number 30
[  183.479211][ T7919] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  183.485919][ T7919] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  183.724309][ T7929] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  183.924901][ T7917] syzkaller0: entered promiscuous mode
[  183.924919][ T7917] syzkaller0: entered allmulticast mode
[  184.198566][   T25] usb 2-1: new high-speed USB device number 31 using dummy_hcd
[  184.328483][   T25] usb 2-1: device descriptor read/64, error -71
[  184.569120][   T25] usb 2-1: new high-speed USB device number 32 using dummy_hcd
[  184.709528][   T25] usb 2-1: device descriptor read/64, error -71
[  184.802804][   T13] IPVS: starting estimator thread 0...
[  184.819647][   T25] usb usb2-port1: attempt power cycle
[  184.892708][ T7939] IPVS: using max 31 ests per chain, 74400 per kthread
[  185.168477][   T25] usb 2-1: new high-speed USB device number 33 using dummy_hcd
[  185.193437][   T25] usb 2-1: device descriptor read/8, error -71
[  185.438476][   T25] usb 2-1: new high-speed USB device number 34 using dummy_hcd
[  185.462378][   T25] usb 2-1: device descriptor read/8, error -71
[  185.575369][   T25] usb usb2-port1: unable to enumerate USB device
[  186.108497][   T44] usb 5-1: new full-speed USB device number 24 using dummy_hcd
[  186.259703][   T44] usb 5-1: not running at top speed; connect to a high speed hub
[  186.259738][   T44] usb 5-1: New USB device found, idVendor=3855, idProduct=d1e5, bcdDevice=c5.15
[  186.260723][   T44] usb 5-1: config 4 has an invalid interface number: 178 but max is 0
[  186.260749][   T44] usb 5-1: config 4 has no interface number 0
[  186.260778][   T44] usb 5-1: config 4 interface 178 has no altsetting 0
[  186.262796][   T44] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  186.262826][   T44] usb 5-1: Product: syz
[  186.262842][   T44] usb 5-1: Manufacturer: syz
[  186.262857][   T44] usb 5-1: SerialNumber: syz
[  186.480982][ T7957] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  186.482915][ T7957] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  186.485058][ T7957] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  186.488011][ T7957] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  186.498367][   T44] usb-storage 5-1:4.178: USB Mass Storage device detected
[  186.597858][   T44] usb 5-1: USB disconnect, device number 24
[  186.898095][ T7970] netlink: 'syz.1.589': attribute type 1 has an invalid length.
[  187.917332][ T7952] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  188.021363][ T7970] 8021q: adding VLAN 0 to HW filter on device bond1
[  188.052393][ T7972] bond1: (slave gretap1): making interface the new active one
[  188.080435][ T7972] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  188.704946][ T7990] tipc: Started in network mode
[  188.704969][ T7990] tipc: Node identity a61252e041e9, cluster identity 4711
[  188.705101][ T7990] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  188.729568][ T7994] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  188.748164][ T7994] syzkaller0: entered promiscuous mode
[  188.748187][ T7994] syzkaller0: entered allmulticast mode
[  188.798303][ T7990] syzkaller0: entered promiscuous mode
[  188.800576][ T7990] syzkaller0: entered allmulticast mode
[  188.812145][ T7999] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  188.837598][ T7999] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  188.850431][ T7994] tipc: Resetting bearer <eth:syzkaller0>
[  188.883964][ T7990] tipc: Resetting bearer <eth:syzkaller0>
[  188.915225][ T7992] tipc: Resetting bearer <eth:syzkaller0>
[  188.971104][ T7992] tipc: Disabling bearer <eth:syzkaller0>
[  189.001966][ T7989] tipc: Resetting bearer <eth:syzkaller0>
[  189.051309][ T5702] hid_parser_main: 91 callbacks suppressed
[  189.051327][ T5702] hid-generic 0000:0000:0004.001D: unknown main item tag 0x0
[  189.051355][ T5702] hid-generic 0000:0000:0004.001D: unknown main item tag 0x0
[  189.051380][ T5702] hid-generic 0000:0000:0004.001D: unknown main item tag 0x0
[  189.052196][ T7989] tipc: Disabling bearer <eth:syzkaller0>
[  189.055590][ T5702] hid-generic 0000:0000:0004.001D: unknown main item tag 0x0
[  189.055619][ T5702] hid-generic 0000:0000:0004.001D: unknown main item tag 0x0
[  189.055644][ T5702] hid-generic 0000:0000:0004.001D: unknown main item tag 0x0
[  189.055660][ T5702] hid-generic 0000:0000:0004.001D: unknown main item tag 0x0
[  189.055676][ T5702] hid-generic 0000:0000:0004.001D: unknown main item tag 0x0
[  189.055692][ T5702] hid-generic 0000:0000:0004.001D: unknown main item tag 0x0
[  189.055708][ T5702] hid-generic 0000:0000:0004.001D: unknown main item tag 0x0
[  189.200683][ T5702] hid-generic 0000:0000:0004.001D: hidraw0: <UNKNOWN> HID v0.03 Device [syz1] on syz0
[  189.202525][ T7999] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  189.231864][ T7999] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  189.234669][ T8007] netlink: 48 bytes leftover after parsing attributes in process `syz.4.601'.
[  189.353454][ T8011] IPVS: length: 201 != 8
[  189.711005][ T8014] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  189.742492][ T8014] syzkaller0: entered promiscuous mode
[  189.742516][ T8014] syzkaller0: entered allmulticast mode
[  189.760124][ T1987] usb 2-1: new low-speed USB device number 35 using dummy_hcd
[  189.808199][ T8014] tipc: Resetting bearer <eth:syzkaller0>
[  189.828956][ T5702] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[  189.865342][ T8013] tipc: Resetting bearer <eth:syzkaller0>
[  189.929317][ T1987] usb 2-1: Invalid ep0 maxpacket: 32
[  189.957188][ T8013] tipc: Disabling bearer <eth:syzkaller0>
[  189.993906][ T5702] usb 5-1: Using ep0 maxpacket: 8
[  189.994727][ T5702] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[  189.997421][ T5702] usb 5-1: config 0 has an invalid interface number: 31 but max is 0
[  189.997445][ T5702] usb 5-1: config 0 has no interface number 0
[  190.001830][ T5702] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  190.001858][ T5702] usb 5-1: Product: syz
[  190.001872][ T5702] usb 5-1: Manufacturer: syz
[  190.001885][ T5702] usb 5-1: SerialNumber: syz
[  190.012506][ T5702] usb 5-1: config 0 descriptor??
[  190.108435][ T1987] usb 2-1: new low-speed USB device number 36 using dummy_hcd
[  190.156475][ T8027] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  190.156862][ T8027] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  190.180797][ T8027] netlink: 'syz.5.606': attribute type 1 has an invalid length.
[  190.258460][ T1987] usb 2-1: Invalid ep0 maxpacket: 32
[  190.258762][ T1987] usb usb2-port1: attempt power cycle
[  190.542210][ T8018] bond1: left promiscuous mode
[  190.542232][ T8018] wireguard0: left promiscuous mode
[  190.620269][ T8035] syzkaller1: entered promiscuous mode
[  190.620285][ T8035] syzkaller1: entered allmulticast mode
[  190.640674][ T1987] usb 2-1: new low-speed USB device number 37 using dummy_hcd
[  190.670017][ T1987] usb 2-1: Invalid ep0 maxpacket: 32
[  190.818475][ T1987] usb 2-1: new low-speed USB device number 38 using dummy_hcd
[  190.839067][ T1987] usb 2-1: Invalid ep0 maxpacket: 32
[  190.839308][ T1987] usb usb2-port1: unable to enumerate USB device
[  191.679366][    T9] usb 1-1: new full-speed USB device number 32 using dummy_hcd
[  191.835580][    T9] usb 1-1: not running at top speed; connect to a high speed hub
[  191.835618][    T9] usb 1-1: New USB device found, idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad
[  191.837374][    T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  191.877998][    T9] usb 1-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0
[  191.878066][    T9] usb 1-1: Product: syz
[  191.878103][    T9] usb 1-1: Manufacturer: syz
[  191.938558][    T9] uvcvideo 1-1:1.0: Found UVC 1.00 device syz (225a:e1d4)
[  192.183053][ T8055] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  192.183902][ T8055] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  192.186201][ T8055] fuse: Invalid gid '0x0000000000000007'
[  192.472359][ T8062] nvme_fc: nvme_fc_parse_traddr: bad traddr string
[  192.625357][ T5702] uvcvideo 5-1:0.31: Found UVC 0.04 device syz (046d:08c3)
[  192.625438][ T5702] uvcvideo 5-1:0.31: Entity type for entity Output 32774 was not initialized!
[  192.625565][ T5702] uvcvideo 5-1:0.31: Failed to create links for entity 5
[  192.625581][ T5702] uvcvideo 5-1:0.31: Failed to register entities (-22).
[  192.667141][ T5702] usb 5-1: USB disconnect, device number 25
[  192.806490][ T8065] vivid-000: disconnect
[  192.807189][ T8062] vivid-000: reconnect
[  192.892264][   T25] hid-generic 0000:0000:0004.001E: hidraw0: <UNKNOWN> HID v0.03 Device [syz1] on syz0
[  193.228665][ T5702] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[  193.398452][ T5702] usb 5-1: Using ep0 maxpacket: 8
[  193.400502][ T5702] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[  193.402535][ T5702] usb 5-1: config 0 has an invalid interface number: 31 but max is 0
[  193.402558][ T5702] usb 5-1: config 0 has no interface number 0
[  193.413678][ T5702] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  193.413704][ T5702] usb 5-1: Product: syz
[  193.413718][ T5702] usb 5-1: Manufacturer: syz
[  193.413732][ T5702] usb 5-1: SerialNumber: syz
[  193.420716][ T5702] usb 5-1: config 0 descriptor??
[  193.582521][ T8076] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  193.606068][ T8076] syzkaller0: entered promiscuous mode
[  193.606084][ T8076] syzkaller0: entered allmulticast mode
[  193.632453][ T8071] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  193.636706][ T8071] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  193.664245][ T8076] tipc: Resetting bearer <eth:syzkaller0>
[  193.712988][ T8075] tipc: Resetting bearer <eth:syzkaller0>
[  193.778000][ T8075] tipc: Disabling bearer <eth:syzkaller0>
[  193.797501][ T5702] uvcvideo 5-1:0.31: Found UVC 0.04 device syz (046d:08c3)
[  193.797568][ T5702] uvcvideo 5-1:0.31: Entity type for entity Output 32774 was not initialized!
[  193.797677][ T5702] uvcvideo 5-1:0.31: Failed to create links for entity 5
[  193.797691][ T5702] uvcvideo 5-1:0.31: Failed to register entities (-22).
[  193.842901][ T5702] usb 5-1: USB disconnect, device number 26
[  194.068559][ T8085] netlink: 24 bytes leftover after parsing attributes in process `syz.3.620'.
[  194.068632][ T8085] netlink: 16 bytes leftover after parsing attributes in process `syz.3.620'.
[  194.076403][ T8086] netlink: 24 bytes leftover after parsing attributes in process `syz.3.620'.
[  194.187544][ T8090] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  194.228903][ T1311] ieee802154 phy0 wpan0: encryption failed: -22
[  194.229024][ T1311] ieee802154 phy1 wpan1: encryption failed: -22
[  194.271502][    T9] uvcvideo 1-1:1.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround.
[  194.271995][    T9] uvcvideo 1-1:1.1: Failed to query (GET_CUR) UVC probe control : -71 (exp. 26).
[  194.272071][    T9] uvcvideo 1-1:1.1: Failed to initialize the device (-71).
[  194.283706][    T9] uvcvideo 1-1:1.0: probe with driver uvcvideo failed with error -71
[  194.324353][    T9] usb 1-1: USB disconnect, device number 32
[  194.418469][   T25] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[  194.451936][ T8096] binder: 8095:8096 ioctl c058560f 0 returned -22
[  194.458511][ T5702] usb 2-1: new low-speed USB device number 39 using dummy_hcd
[  194.568565][   T25] usb 4-1: Using ep0 maxpacket: 16
[  194.569488][   T25] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=76.fe
[  194.571165][   T25] usb 4-1: config 4 has an invalid interface number: 9 but max is 0
[  194.571188][   T25] usb 4-1: config 4 has no interface number 0
[  194.571224][   T25] usb 4-1: config 4 interface 9 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  194.571240][   T25] usb 4-1: config 4 interface 9 altsetting 2 bulk endpoint 0x84 has invalid maxpacket 64
[  194.571252][   T25] usb 4-1: config 4 interface 9 has no altsetting 0
[  194.573119][   T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  194.573141][   T25] usb 4-1: Product: syz
[  194.573155][   T25] usb 4-1: Manufacturer: syz
[  194.573169][   T25] usb 4-1: SerialNumber: syz
[  194.579549][ T8088] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22
[  194.579682][ T8088] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22
[  194.590948][ T5702] usb 2-1: device descriptor read/64, error -71
[  194.613860][   T25] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  194.664801][   T44] usb 5-1: new full-speed USB device number 27 using dummy_hcd
[  194.778453][    T9] usb 1-1: new high-speed USB device number 33 using dummy_hcd
[  194.813070][   T44] usb 5-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f7.3f
[  194.814673][   T44] usb 5-1: config 0 has an invalid interface number: 2 but max is 0
[  194.814704][   T44] usb 5-1: config 0 has no interface number 0
[  194.814743][   T44] usb 5-1: config 0 interface 2 altsetting 2 endpoint 0x6 has invalid maxpacket 512, setting to 64
[  194.814793][   T44] usb 5-1: config 0 interface 2 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  194.814817][   T44] usb 5-1: config 0 interface 2 altsetting 2 endpoint 0x82 has invalid maxpacket 192, setting to 64
[  194.814842][   T44] usb 5-1: config 0 interface 2 has no altsetting 0
[  194.818070][   T44] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  194.818094][   T44] usb 5-1: Product: syz
[  194.818108][   T44] usb 5-1: Manufacturer: syz
[  194.818122][   T44] usb 5-1: SerialNumber: syz
[  194.828442][ T5702] usb 2-1: new low-speed USB device number 40 using dummy_hcd
[  194.829483][   T44] usb 5-1: config 0 descriptor??
[  194.831937][ T8094] raw-gadget.6 gadget.4: fail, usb_ep_enable returned -22
[  194.832264][ T8094] raw-gadget.6 gadget.4: fail, usb_ep_enable returned -22
[  194.845182][   T44] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  194.949304][    T9] usb 1-1: device descriptor read/64, error -71
[  194.958783][ T5702] usb 2-1: device descriptor read/64, error -71
[  195.069959][ T5702] usb usb2-port1: attempt power cycle
[  195.198487][    T9] usb 1-1: new high-speed USB device number 34 using dummy_hcd
[  195.273444][ T8105] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  195.293794][ T5912] usb 4-1: Failed to submit usb control message: -71
[  195.293830][ T5912] usb 4-1: unable to send the bmi data to the device: -71
[  195.293848][ T5912] usb 4-1: unable to get target info from device
[  195.293862][ T5912] usb 4-1: could not get target info (-71)
[  195.293891][ T5912] usb 4-1: could not probe fw (-71)
[  195.295428][ T5667] usb 4-1: USB disconnect, device number 25
[  195.338173][    T9] usb 1-1: device descriptor read/64, error -71
[  195.408729][ T5702] usb 2-1: new low-speed USB device number 41 using dummy_hcd
[  195.429442][ T5702] usb 2-1: device descriptor read/8, error -71
[  195.450692][    T9] usb usb1-port1: attempt power cycle
[  195.466214][ T8107] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  195.466713][ T8107] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  195.643396][ T5667] usb 5-1: USB disconnect, device number 27
[  195.668459][ T5702] usb 2-1: new low-speed USB device number 42 using dummy_hcd
[  195.689154][ T5702] usb 2-1: device descriptor read/8, error -71
[  195.697376][ T8110] FAULT_INJECTION: forcing a failure.
[  195.697376][ T8110] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  195.697411][ T8110] CPU: 1 UID: 0 PID: 8110 Comm: syz.4.629 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  195.697437][ T8110] Tainted: [L]=SOFTLOCKUP
[  195.697444][ T8110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  195.697456][ T8110] Call Trace:
[  195.697463][ T8110]  <TASK>
[  195.697472][ T8110]  dump_stack_lvl+0xe8/0x150
[  195.697506][ T8110]  should_fail_ex+0x410/0x560
[  195.697537][ T8110]  _copy_from_iter+0x1d3/0x1660
[  195.697565][ T8110]  ? __alloc_skb+0x27a/0x7a0
[  195.697594][ T8110]  ? __alloc_skb+0x27a/0x7a0
[  195.697623][ T8110]  ? __alloc_skb+0x27a/0x7a0
[  195.697647][ T8110]  ? __pfx__copy_from_iter+0x10/0x10
[  195.697669][ T8110]  ? kmem_cache_alloc_node_noprof+0x1f9/0x610
[  195.697690][ T8110]  ? __alloc_skb+0x27a/0x7a0
[  195.697717][ T8110]  ? __alloc_skb+0x27a/0x7a0
[  195.697750][ T8110]  ? netlink_sendmsg+0x650/0xb40
[  195.697774][ T8110]  ? skb_put+0x112/0x210
[  195.697795][ T8110]  netlink_sendmsg+0x6c0/0xb40
[  195.697828][ T8110]  ? __pfx_netlink_sendmsg+0x10/0x10
[  195.697859][ T8110]  ? apparmor_socket_sendmsg+0x98/0x360
[  195.697886][ T8110]  ? __pfx_netlink_sendmsg+0x10/0x10
[  195.697909][ T8110]  sock_sendmsg_nosec+0x13a/0x180
[  195.697937][ T8110]  ____sys_sendmsg+0x54e/0x850
[  195.697963][ T8110]  ? __pfx_____sys_sendmsg+0x10/0x10
[  195.697991][ T8110]  ? import_iovec+0x73/0xa0
[  195.698020][ T8110]  ___sys_sendmsg+0x2a5/0x360
[  195.698039][ T8110]  ? __lock_acquire+0x747/0x2de0
[  195.698064][ T8110]  ? __pfx____sys_sendmsg+0x10/0x10
[  195.698117][ T8110]  ? __fget_files+0x2a/0x420
[  195.698143][ T8110]  ? __fget_files+0x3a2/0x420
[  195.698170][ T8110]  __x64_sys_sendmsg+0x1b1/0x290
[  195.698192][ T8110]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  195.698232][ T8110]  do_syscall_64+0x166/0x520
[  195.698254][ T8110]  ? trace_irq_disable+0x3b/0x140
[  195.698276][ T8110]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  195.698297][ T8110]  ? clear_bhb_loop+0x70/0xc0
[  195.698319][ T8110]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  195.698336][ T8110] RIP: 0033:0x7f8f8719e1d9
[  195.698354][ T8110] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  195.698370][ T8110] RSP: 002b:00007f8f853f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  195.698390][ T8110] RAX: ffffffffffffffda RBX: 00007f8f87425fa0 RCX: 00007f8f8719e1d9
[  195.698403][ T8110] RDX: 0000000000000004 RSI: 0000200000000000 RDI: 0000000000000003
[  195.698415][ T8110] RBP: 00007f8f853f6090 R08: 0000000000000000 R09: 0000000000000000
[  195.698427][ T8110] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  195.698439][ T8110] R13: 00007f8f87426038 R14: 00007f8f87425fa0 R15: 00007f8f8754fa48
[  195.698468][ T8110]  </TASK>
[  195.799023][    T9] usb 1-1: new high-speed USB device number 35 using dummy_hcd
[  195.829564][    T9] usb 1-1: device descriptor read/8, error -71
[  195.836657][ T5702] usb usb2-port1: unable to enumerate USB device
[  196.047379][ T8112] tipc: Started in network mode
[  196.047406][ T8112] tipc: Node identity 42bea0b0c5c9, cluster identity 4711
[  196.047525][ T8112] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  196.067016][ T8112] syzkaller0: entered promiscuous mode
[  196.067060][ T8112] syzkaller0: entered allmulticast mode
[  196.078408][    T9] usb 1-1: new high-speed USB device number 36 using dummy_hcd
[  196.094758][ T8112] tipc: Resetting bearer <eth:syzkaller0>
[  196.107480][ T8111] tipc: Resetting bearer <eth:syzkaller0>
[  196.109501][    T9] usb 1-1: device descriptor read/8, error -71
[  196.134690][ T8111] tipc: Disabling bearer <eth:syzkaller0>
[  196.220226][    T9] usb usb1-port1: unable to enumerate USB device
[  196.300910][ T5622] Bluetooth: hci2: command 0x0406 tx timeout
[  196.300952][ T5622] Bluetooth: hci1: command 0x0406 tx timeout
[  196.300971][ T5626] Bluetooth: hci0: command 0x0406 tx timeout
[  196.300999][ T5626] Bluetooth: hci3: command 0x0406 tx timeout
[  196.304100][ T5667] usb 4-1: new high-speed USB device number 26 using dummy_hcd
[  196.480155][ T5667] usb 4-1: Using ep0 maxpacket: 16
[  196.482879][ T5667] usb 4-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22
[  196.490473][ T5667] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  196.490498][ T5667] usb 4-1: Product: syz
[  196.490533][ T5667] usb 4-1: Manufacturer: syz
[  196.490546][ T5667] usb 4-1: SerialNumber: syz
[  196.502736][ T8127] netlink: 12 bytes leftover after parsing attributes in process `syz.5.635'.
[  196.597925][ T8129] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  196.743782][ T5667] usb 4-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state
[  196.752587][ T5667] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  196.753007][ T5667] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0)
[  196.753076][ T5667] usb 4-1: media controller created
[  196.767947][ T5667] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  197.035746][ T5667] zl10353_read_register: readreg error (reg=127, ret==-110)
[  197.126408][ T5667] dvb_usb_gl861 4-1:157.0: probe with driver dvb_usb_gl861 failed with error -5
[  197.133938][ T5667] usb 4-1: USB disconnect, device number 26
[  197.247350][ T8141] netlink: 32 bytes leftover after parsing attributes in process `syz.1.639'.
[  197.372650][ T8145] netlink: 4 bytes leftover after parsing attributes in process `syz.4.641'.
[  197.406674][ T8145] netlink: 4 bytes leftover after parsing attributes in process `syz.4.641'.
[  197.440976][ T8145] netlink: 4 bytes leftover after parsing attributes in process `syz.4.641'.
[  197.471359][ T8145] netlink: 4 bytes leftover after parsing attributes in process `syz.4.641'.
[  197.514870][ T8145] netlink: 4 bytes leftover after parsing attributes in process `syz.4.641'.
[  197.551533][ T8145] netlink: 4 bytes leftover after parsing attributes in process `syz.4.641'.
[  197.551716][ T8155] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  197.552310][ T8157] FAULT_INJECTION: forcing a failure.
[  197.552310][ T8157] name failslab, interval 1, probability 0, space 0, times 0
[  197.552340][ T8157] CPU: 1 UID: 0 PID: 8157 Comm: syz.0.643 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  197.552367][ T8157] Tainted: [L]=SOFTLOCKUP
[  197.552375][ T8157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  197.552387][ T8157] Call Trace:
[  197.552395][ T8157]  <TASK>
[  197.552403][ T8157]  dump_stack_lvl+0xe8/0x150
[  197.552436][ T8157]  should_fail_ex+0x410/0x560
[  197.552467][ T8157]  should_failslab+0xa8/0x100
[  197.552495][ T8157]  __kmalloc_node_track_caller_noprof+0xfb/0x720
[  197.552520][ T8157]  ? kobject_set_name_vargs+0x61/0x110
[  197.552544][ T8157]  ? kobject_set_name_vargs+0x61/0x110
[  197.552577][ T8157]  kstrdup+0x42/0x100
[  197.552602][ T8157]  kobject_set_name_vargs+0x61/0x110
[  197.552630][ T8157]  dev_set_name+0xe2/0x140
[  197.552657][ T8157]  ? __pfx_dev_set_name+0x10/0x10
[  197.552680][ T8157]  ? __init_waitqueue_head+0xa8/0x150
[  197.552716][ T8157]  ? device_initialize+0x394/0x470
[  197.552745][ T8157]  netdev_register_kobject+0xb7/0x350
[  197.552778][ T8157]  register_netdevice+0x1433/0x1eb0
[  197.552818][ T8157]  ? __pfx_register_netdevice+0x10/0x10
[  197.552843][ T8157]  ? macvlan_changelink_sources+0x130e/0x1650
[  197.552879][ T8157]  macvlan_common_newlink+0x12e5/0x1a50
[  197.552900][ T8157]  ? alloc_netdev_mqs+0xd44/0x12a0
[  197.552923][ T8157]  ? alloc_netdev_mqs+0xd44/0x12a0
[  197.552958][ T8157]  ? __pfx_macvlan_common_newlink+0x10/0x10
[  197.552981][ T8157]  ? rtnl_create_link+0xa04/0xd70
[  197.553013][ T8157]  ? __pfx_macvlan_newlink+0x10/0x10
[  197.553040][ T8157]  rtnl_newlink_create+0x305/0x7b0
[  197.553069][ T8157]  ? __pfx_rtnl_newlink_create+0x10/0x10
[  197.553094][ T8157]  ? __pfx___mutex_lock+0x10/0x10
[  197.553128][ T8157]  ? ns_capable+0x89/0xe0
[  197.553158][ T8157]  rtnl_newlink+0x166d/0x1c30
[  197.553194][ T8157]  ? __pfx_rtnl_newlink+0x10/0x10
[  197.553211][ T8157]  ? do_syscall_64+0x166/0x520
[  197.553231][ T8157]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  197.553288][ T8157]  ? kasan_quarantine_put+0xbb/0x1f0
[  197.553312][ T8157]  ? lockdep_hardirqs_on+0x7b/0x110
[  197.553338][ T8157]  ? nlmon_xmit+0xb0/0x100
[  197.553362][ T8157]  ? kmem_cache_free+0x182/0x650
[  197.553398][ T8157]  ? __lock_acquire+0x747/0x2de0
[  197.553429][ T8157]  ? __local_bh_enable_ip+0xd6/0x140
[  197.553455][ T8157]  ? lockdep_hardirqs_on+0x7b/0x110
[  197.553475][ T8157]  ? __dev_queue_xmit+0x29b/0x3920
[  197.553497][ T8157]  ? __local_bh_enable_ip+0xd6/0x140
[  197.553537][ T8157]  ? lock_acquire+0x115/0x350
[  197.553574][ T8157]  ? __pfx_rtnl_newlink+0x10/0x10
[  197.553590][ T8157]  rtnetlink_rcv_msg+0x802/0xc00
[  197.553611][ T8157]  ? rtnetlink_rcv_msg+0x1c9/0xc00
[  197.553629][ T8157]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  197.553655][ T8157]  ? ref_tracker_free+0x689/0x830
[  197.553686][ T8157]  ? __pfx_ref_tracker_free+0x10/0x10
[  197.553712][ T8157]  ? __asan_memcpy+0x40/0x70
[  197.553732][ T8157]  ? __skb_clone+0x5c/0x6c0
[  197.553759][ T8157]  netlink_rcv_skb+0x226/0x4a0
[  197.553785][ T8157]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  197.553816][ T8157]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  197.553854][ T8157]  ? netlink_deliver_tap+0x2e/0x1b0
[  197.553877][ T8157]  ? netlink_deliver_tap+0x2e/0x1b0
[  197.553897][ T8157]  netlink_unicast+0x7bd/0x940
[  197.553915][ T8157]  netlink_sendmsg+0x813/0xb40
[  197.553933][ T8157]  ? __pfx_netlink_sendmsg+0x10/0x10
[  197.553957][ T8157]  ? apparmor_socket_sendmsg+0x98/0x360
[  197.553986][ T8157]  ? __pfx_netlink_sendmsg+0x10/0x10
[  197.554016][ T8157]  sock_sendmsg_nosec+0x13a/0x180
[  197.554042][ T8157]  ____sys_sendmsg+0x54e/0x850
[  197.554057][ T8157]  ? __pfx_____sys_sendmsg+0x10/0x10
[  197.554073][ T8157]  ? import_iovec+0x73/0xa0
[  197.554091][ T8157]  ___sys_sendmsg+0x2a5/0x360
[  197.554106][ T8157]  ? __lock_acquire+0x747/0x2de0
[  197.554132][ T8157]  ? __pfx____sys_sendmsg+0x10/0x10
[  197.554189][ T8157]  ? __fget_files+0x2a/0x420
[  197.554199][ T8157]  ? __fget_files+0x3a2/0x420
[  197.554215][ T8157]  __x64_sys_sendmsg+0x1b1/0x290
[  197.554227][ T8157]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  197.554252][ T8157]  do_syscall_64+0x166/0x520
[  197.554273][ T8157]  ? trace_irq_disable+0x3b/0x140
[  197.554296][ T8157]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  197.554316][ T8157]  ? clear_bhb_loop+0x70/0xc0
[  197.554339][ T8157]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  197.554350][ T8157] RIP: 0033:0x7f516ad9e1d9
[  197.554361][ T8157] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  197.554371][ T8157] RSP: 002b:00007f516bc67028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  197.554383][ T8157] RAX: ffffffffffffffda RBX: 00007f516b025fa0 RCX: 00007f516ad9e1d9
[  197.554391][ T8157] RDX: 0000000008000002 RSI: 0000200000000300 RDI: 0000000000000003
[  197.554400][ T8157] RBP: 00007f516bc67090 R08: 0000000000000000 R09: 0000000000000000
[  197.554412][ T8157] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  197.554423][ T8157] R13: 00007f516b026038 R14: 00007f516b025fa0 R15: 00007f516b14fa48
[  197.554457][ T8157]  </TASK>
[  197.843248][ T8145] netlink: 4 bytes leftover after parsing attributes in process `syz.4.641'.
[  197.954207][ T8145] netlink: 4 bytes leftover after parsing attributes in process `syz.4.641'.
[  197.954616][ T8155] syzkaller0: entered promiscuous mode
[  197.954634][ T8155] syzkaller0: entered allmulticast mode
[  198.020627][ T8164] tipc: Resetting bearer <eth:syzkaller0>
[  198.185137][ T8149] tipc: Resetting bearer <eth:syzkaller0>
[  198.236382][ T8149] tipc: Disabling bearer <eth:syzkaller0>
[  198.858589][ T5702] usb 1-1: new high-speed USB device number 37 using dummy_hcd
[  199.011063][ T5702] usb 1-1: Using ep0 maxpacket: 8
[  199.012618][ T5702] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[  199.014336][ T5702] usb 1-1: config 0 has an invalid interface number: 31 but max is 0
[  199.014361][ T5702] usb 1-1: config 0 has no interface number 0
[  199.022630][ T5702] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  199.022656][ T5702] usb 1-1: Product: syz
[  199.022669][ T5702] usb 1-1: Manufacturer: syz
[  199.022683][ T5702] usb 1-1: SerialNumber: syz
[  199.035125][ T5702] usb 1-1: config 0 descriptor??
[  199.190076][  T992] usb 2-1: new full-speed USB device number 43 using dummy_hcd
[  199.354800][  T992] usb 2-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77
[  199.369473][  T992] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 11
[  199.369526][  T992] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0
[  199.369565][  T992] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0
[  199.369578][  T992] usb 2-1: config 1 interface 0 has no altsetting 0
[  199.369597][  T992] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  199.434132][  T992] ums-sddr09 2-1:1.0: USB Mass Storage device detected
[  199.493272][ T8191] bridge0: port 2(bridge_slave_1) entered disabled state
[  199.493527][ T8191] bridge0: port 1(bridge_slave_0) entered disabled state
[  199.691170][  T992] ums-sddr09 2-1:1.0: probe with driver ums-sddr09 failed with error -22
[  199.713191][  T992] usb 2-1: USB disconnect, device number 43
[  199.908213][ T8191] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  199.922241][ T8191] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  200.680677][ T8197] 8021q: adding VLAN 0 to HW filter on device bond0
[  200.707058][ T8197] 8021q: adding VLAN 0 to HW filter on device team0
[  200.736439][ T8209] ip_tables: iptables: counters copy to user failed while replacing table
[  200.806051][ T8197] 8021q: adding VLAN 0 to HW filter on device batadv0
[  200.942744][ T8197] bridge0: port 1(bridge_slave_0) entered blocking state
[  200.942835][ T8197] bridge0: port 1(bridge_slave_0) entered forwarding state
[  200.989432][ T8197] bridge0: port 2(bridge_slave_1) entered blocking state
[  200.990504][ T8197] bridge0: port 2(bridge_slave_1) entered forwarding state
[  201.151554][ T8197] batman_adv: batadv0: Interface activated: batadv_slave_0
[  201.189502][ T8197] batman_adv: batadv0: Interface activated: batadv_slave_1
[  201.326435][ T8197] veth1_vlan: left promiscuous mode
[  201.338561][ T8197] veth0_vlan: left promiscuous mode
[  201.356384][ T8197] veth0_vlan: entered promiscuous mode
[  201.425957][ T8197] veth1_vlan: entered promiscuous mode
[  201.486097][ T8197] veth1_macvtap: left promiscuous mode
[  201.495963][ T8197] veth0_macvtap: left promiscuous mode
[  201.524158][ T8197] veth0_macvtap: entered promiscuous mode
[  201.532077][ T8197] veth1_macvtap: entered promiscuous mode
[  201.632625][ T8197] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  201.633626][ T8197] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  201.634572][ T8197] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  201.636709][ T8197] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  201.846673][ T8206] bridge0: port 2(bridge_slave_1) entered disabled state
[  201.848873][ T8206] bridge0: port 1(bridge_slave_0) entered disabled state
[  201.864624][ T5702] uvcvideo 1-1:0.31: Found UVC 0.04 device syz (046d:08c3)
[  201.864688][ T5702] uvcvideo 1-1:0.31: Entity type for entity Output 32774 was not initialized!
[  201.864793][ T5702] uvcvideo 1-1:0.31: Failed to create links for entity 5
[  201.864808][ T5702] uvcvideo 1-1:0.31: Failed to register entities (-22).
[  201.949970][ T5702] usb 1-1: USB disconnect, device number 37
[  201.954261][ T8206] bridge0: entered allmulticast mode
[  202.242576][ T8221] __nla_validate_parse: 3 callbacks suppressed
[  202.242598][ T8221] netlink: 12 bytes leftover after parsing attributes in process `syz.1.659'.
[  202.364381][ T8215] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  202.402983][ T8215] syzkaller0: entered promiscuous mode
[  202.403001][ T8215] syzkaller0: entered allmulticast mode
[  202.455810][ T8215] tipc: Resetting bearer <eth:syzkaller0>
[  202.507313][ T8214] tipc: Resetting bearer <eth:syzkaller0>
[  202.592799][ T8214] tipc: Disabling bearer <eth:syzkaller0>
[  202.629529][    T9] hid_parser_main: 192 callbacks suppressed
[  202.629561][    T9] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0
[  202.629580][    T9] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0
[  202.629597][    T9] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0
[  202.629612][    T9] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0
[  202.629627][    T9] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0
[  202.629641][    T9] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0
[  202.629661][    T9] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0
[  202.629695][    T9] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0
[  202.629709][    T9] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0
[  202.629724][    T9] hid-generic 0000:0000:0004.001F: unknown main item tag 0x0
[  202.660692][    T9] hid-generic 0000:0000:0004.001F: hidraw0: <UNKNOWN> HID v0.03 Device [syz1] on syz0
[  202.689197][ T5709] usb 4-1: new high-speed USB device number 27 using dummy_hcd
[  202.829949][ T5702] usb 5-1: new full-speed USB device number 28 using dummy_hcd
[  202.853981][ T5709] usb 4-1: Using ep0 maxpacket: 16
[  202.869087][ T5709] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  202.892099][ T5709] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  202.892126][ T5709] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[  202.941375][ T5709] usb 4-1: string descriptor 0 read error: -22
[  202.941472][ T5709] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  202.989684][ T5702] usb 5-1: unable to get BOS descriptor or descriptor too short
[  202.993817][ T5702] usb 5-1: not running at top speed; connect to a high speed hub
[  202.993846][ T5702] usb 5-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31
[  203.010329][ T5702] usb 5-1: config 0 has an invalid interface number: 88 but max is 0
[  203.010357][ T5702] usb 5-1: config 0 has no interface number 0
[  203.010393][ T5702] usb 5-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid maxpacket 46935, setting to 64
[  203.010418][ T5702] usb 5-1: config 0 interface 88 has no altsetting 0
[  203.027518][ T5702] usb 5-1: language id specifier not provided by device, defaulting to English
[  203.039047][ T5702] usb 5-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3
[  203.039081][ T5702] usb 5-1: Product: syz
[  203.039094][ T5702] usb 5-1: SerialNumber: syz
[  203.053963][ T5702] usb 5-1: config 0 descriptor??
[  203.054724][ T8211] raw-gadget.5 gadget.4: fail, usb_ep_enable returned -22
[  203.305067][ T8211] netlink: 4 bytes leftover after parsing attributes in process `syz.4.655'.
[  203.305488][ T8211] hsr_slave_0: left promiscuous mode
[  203.315392][ T8211] hsr_slave_1: left promiscuous mode
[  203.963621][ T8247] fuse: Bad value for 'user_id'
[  203.963636][ T8247] fuse: Bad value for 'user_id'
[  203.972324][ T8247] IPv4: Oversized IP packet from 127.202.26.0
[  204.230163][ T5667] usb 2-1: new full-speed USB device number 44 using dummy_hcd
[  204.300498][ T5702] input: syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.88/input/input19
[  204.352789][ T5702] usb 5-1: USB disconnect, device number 28
[  204.352934][    C0] usb_acecad 5-1:0.88: can't resubmit intr, dummy_hcd.4-1/input0, status -19
[  204.379675][ T5667] usb 2-1: device descriptor read/64, error -71
[  204.618598][ T5667] usb 2-1: new full-speed USB device number 45 using dummy_hcd
[  204.748511][ T5667] usb 2-1: device descriptor read/64, error -71
[  204.859932][ T5667] usb usb2-port1: attempt power cycle
[  205.074885][ T5688] usb 4-1: USB disconnect, device number 27
[  205.138462][ T5675] usb 1-1: new high-speed USB device number 38 using dummy_hcd
[  205.198571][ T5667] usb 2-1: new full-speed USB device number 46 using dummy_hcd
[  205.222911][ T5667] usb 2-1: device descriptor read/8, error -71
[  205.299484][ T5675] usb 1-1: Using ep0 maxpacket: 32
[  205.303301][ T5675] usb 1-1: unable to get BOS descriptor or descriptor too short
[  205.303333][ T5675] usb 1-1: New USB device found, idVendor=1235, idProduct=8206, bcdDevice= 0.40
[  205.305582][ T5675] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  205.305630][ T5675] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  205.352268][ T5675] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  205.352285][ T5675] usb 1-1: Product: syz
[  205.352293][ T5675] usb 1-1: Manufacturer: syz
[  205.352301][ T5675] usb 1-1: SerialNumber: syz
[  205.386070][ T8266] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  205.458678][ T5667] usb 2-1: new full-speed USB device number 47 using dummy_hcd
[  205.480388][ T5667] usb 2-1: device descriptor read/8, error -71
[  205.516493][ T8272] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  205.528295][ T8272] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  205.589951][ T5667] usb usb2-port1: unable to enumerate USB device
[  205.766002][ T8277] FAULT_INJECTION: forcing a failure.
[  205.766002][ T8277] name failslab, interval 1, probability 0, space 0, times 0
[  205.766038][ T8277] CPU: 0 UID: 0 PID: 8277 Comm: syz.4.676 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  205.766065][ T8277] Tainted: [L]=SOFTLOCKUP
[  205.766075][ T8277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  205.766086][ T8277] Call Trace:
[  205.766094][ T8277]  <TASK>
[  205.766103][ T8277]  dump_stack_lvl+0xe8/0x150
[  205.766135][ T8277]  should_fail_ex+0x410/0x560
[  205.766166][ T8277]  should_failslab+0xa8/0x100
[  205.766193][ T8277]  __kmalloc_node_track_caller_noprof+0xfb/0x720
[  205.766217][ T8277]  ? kobject_set_name_vargs+0x61/0x110
[  205.766240][ T8277]  ? kobject_set_name_vargs+0x61/0x110
[  205.766268][ T8277]  kstrdup+0x42/0x100
[  205.766293][ T8277]  kobject_set_name_vargs+0x61/0x110
[  205.766321][ T8277]  dev_set_name+0xe2/0x140
[  205.766348][ T8277]  ? __pfx_dev_set_name+0x10/0x10
[  205.766369][ T8277]  ? __init_waitqueue_head+0xa8/0x150
[  205.766396][ T8277]  ? device_initialize+0x394/0x470
[  205.766421][ T8277]  netdev_register_kobject+0xb7/0x350
[  205.766453][ T8277]  register_netdevice+0x1433/0x1eb0
[  205.766492][ T8277]  ? __pfx_register_netdevice+0x10/0x10
[  205.766523][ T8277]  ? net_generic+0x1e/0x240
[  205.766556][ T8277]  vti6_tnl_create2+0x79/0x370
[  205.766589][ T8277]  vti6_locate+0x684/0x780
[  205.766626][ T8277]  ? __pfx_vti6_locate+0x10/0x10
[  205.766656][ T8277]  ? vti6_siocdevprivate+0x560/0x820
[  205.766689][ T8277]  vti6_siocdevprivate+0x6ac/0x820
[  205.766720][ T8277]  ? __pfx_vti6_siocdevprivate+0x10/0x10
[  205.766770][ T8277]  ? __pfx___mutex_lock+0x10/0x10
[  205.766790][ T8277]  ? full_name_hash+0xb0/0xe0
[  205.766826][ T8277]  dev_ifsioc+0xb56/0x1360
[  205.766853][ T8277]  dev_ioctl+0x84c/0x1150
[  205.766893][ T8277]  sock_ioctl+0x753/0x7e0
[  205.766920][ T8277]  ? __pfx_sock_ioctl+0x10/0x10
[  205.766946][ T8277]  ? __fget_files+0x3a2/0x420
[  205.766963][ T8277]  ? __fget_files+0x2a/0x420
[  205.766984][ T8277]  ? bpf_lsm_file_ioctl+0x9/0x20
[  205.767004][ T8277]  ? __pfx_sock_ioctl+0x10/0x10
[  205.767027][ T8277]  __se_sys_ioctl+0xfc/0x170
[  205.767054][ T8277]  do_syscall_64+0x166/0x520
[  205.767074][ T8277]  ? trace_irq_disable+0x3b/0x140
[  205.767095][ T8277]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  205.767115][ T8277]  ? clear_bhb_loop+0x70/0xc0
[  205.767139][ T8277]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  205.767159][ T8277] RIP: 0033:0x7f8f8719e1d9
[  205.767177][ T8277] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  205.767194][ T8277] RSP: 002b:00007f8f853f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  205.767215][ T8277] RAX: ffffffffffffffda RBX: 00007f8f87425fa0 RCX: 00007f8f8719e1d9
[  205.767229][ T8277] RDX: 00002000000003c0 RSI: 00000000000089f1 RDI: 0000000000000004
[  205.767242][ T8277] RBP: 00007f8f853f6090 R08: 0000000000000000 R09: 0000000000000000
[  205.767254][ T8277] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  205.767266][ T8277] R13: 00007f8f87426038 R14: 00007f8f87425fa0 R15: 00007f8f8754fa48
[  205.767298][ T8277]  </TASK>
[  206.059056][ T5675] usb 1-1: Focusrite Clarett USB Mixer Driver enabled (pid=0x8206); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues
[  206.059120][ T5675] usb 1-1: Error initialising Clarett USB Mixer Driver: -22
[  206.126206][ T5675] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22
[  206.134241][ T5675] usb 1-1: USB disconnect, device number 38
[  206.176602][ T5918] udevd[5918]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  206.208579][  T992] usb 5-1: new high-speed USB device number 29 using dummy_hcd
[  206.338488][  T992] usb 5-1: device descriptor read/64, error -71
[  206.578552][  T992] usb 5-1: new high-speed USB device number 30 using dummy_hcd
[  206.650998][ T8290] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  206.651533][ T8290] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  206.728459][  T992] usb 5-1: device descriptor read/64, error -71
[  206.848918][  T992] usb usb5-port1: attempt power cycle
[  206.884084][ T8297] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size
[  207.087145][ T8301] netlink: 8 bytes leftover after parsing attributes in process `syz.1.684'.
[  207.087168][ T8301] netlink: 8 bytes leftover after parsing attributes in process `syz.1.684'.
[  207.128514][ T5675] usb 1-1: new high-speed USB device number 39 using dummy_hcd
[  207.158463][ T5702] usb 4-1: new high-speed USB device number 28 using dummy_hcd
[  207.198595][  T992] usb 5-1: new high-speed USB device number 31 using dummy_hcd
[  207.221153][  T992] usb 5-1: device descriptor read/8, error -71
[  207.278453][ T5675] usb 1-1: Using ep0 maxpacket: 16
[  207.279314][ T5675] usb 1-1: New USB device found, idVendor=05ac, idProduct=0246, bcdDevice=27.b1
[  207.280732][ T5675] usb 1-1: config 3 has an invalid interface number: 20 but max is 0
[  207.280747][ T5675] usb 1-1: config 3 has no interface number 0
[  207.280763][ T5675] usb 1-1: config 3 interface 20 has no altsetting 0
[  207.283720][ T5675] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  207.283735][ T5675] usb 1-1: Product: syz
[  207.283759][ T5675] usb 1-1: Manufacturer: syz
[  207.283767][ T5675] usb 1-1: SerialNumber: syz
[  207.318625][ T5702] usb 4-1: Using ep0 maxpacket: 32
[  207.344635][ T5702] usb 4-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f
[  207.371807][ T5702] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  207.371833][ T5702] usb 4-1: Product: syz
[  207.371847][ T5702] usb 4-1: Manufacturer: syz
[  207.372107][ T5702] usb 4-1: SerialNumber: syz
[  207.375621][ T5702] usb 4-1: config 0 descriptor??
[  207.488661][  T992] usb 5-1: new high-speed USB device number 32 using dummy_hcd
[  207.519331][  T992] usb 5-1: device descriptor read/8, error -71
[  207.628676][  T992] usb usb5-port1: unable to enumerate USB device
[  207.790588][ T5702] airspy 4-1:0.0: Board ID: 00
[  207.790608][ T5702] airspy 4-1:0.0: Firmware version: 
[  208.201665][ T8296] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  208.204818][ T8296] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  208.240684][ T4934] Bluetooth: hci0: unexpected event for opcode 0x0c0d
[  208.749164][ T5702] airspy 4-1:0.0: usb_control_msg() failed -71 request 0e
[  208.791992][ T5702] airspy 4-1:0.0: Registered as swradio24
[  208.792016][ T5702] airspy 4-1:0.0: SDR API is still slightly experimental and functionality changes may follow
[  208.796380][ T5702] usb 4-1: USB disconnect, device number 28
[  209.143616][ T8320] usb usb8: usbfs: process 8320 (syz.4.688) did not claim interface 0 before use
[  209.616505][ T8331] tipc: Started in network mode
[  209.617421][ T8331] tipc: Node identity daff04075888, cluster identity 4711
[  209.617600][ T8331] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  209.658091][ T8331] syzkaller0: entered promiscuous mode
[  209.660635][ T8331] syzkaller0: entered allmulticast mode
[  209.709310][ T8331] tipc: Resetting bearer <eth:syzkaller0>
[  209.742514][ T8330] tipc: Resetting bearer <eth:syzkaller0>
[  209.782936][ T8330] tipc: Disabling bearer <eth:syzkaller0>
[  210.057967][ T5675] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:3.20/input/input20
[  210.082599][ T4968] bcm5974 1-1:3.20: could not read from device
[  210.140849][ T4968] bcm5974 1-1:3.20: could not read from device
[  210.146047][ T5675] usb 1-1: USB disconnect, device number 39
[  210.166973][ T4968] bcm5974 1-1:3.20: could not read from device
[  210.199371][ T4968] bcm5974 1-1:3.20: could not read from device
[  210.348004][ T5613] udevd[5613]: Error opening device "/dev/input/event5": No such file or directory
[  210.348228][ T5613] udevd[5613]: Unable to EVIOCGABS device "/dev/input/event5"
[  210.369410][ T5613] udevd[5613]: Unable to EVIOCGABS device "/dev/input/event5"
[  210.369543][ T5613] udevd[5613]: Unable to EVIOCGABS device "/dev/input/event5"
[  210.369677][ T5613] udevd[5613]: Unable to EVIOCGABS device "/dev/input/event5"
[  210.373277][ T8354] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  210.373658][ T8354] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  210.406314][ T8355] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  210.406804][ T8355] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  210.712313][  T992] hid_parser_main: 91 callbacks suppressed
[  210.712336][  T992] hid-generic 0000:0000:0004.0020: unknown main item tag 0x0
[  210.712366][  T992] hid-generic 0000:0000:0004.0020: unknown main item tag 0x0
[  210.712392][  T992] hid-generic 0000:0000:0004.0020: unknown main item tag 0x0
[  210.712417][  T992] hid-generic 0000:0000:0004.0020: unknown main item tag 0x0
[  210.712442][  T992] hid-generic 0000:0000:0004.0020: unknown main item tag 0x0
[  210.712467][  T992] hid-generic 0000:0000:0004.0020: unknown main item tag 0x0
[  210.712493][  T992] hid-generic 0000:0000:0004.0020: unknown main item tag 0x0
[  210.712518][  T992] hid-generic 0000:0000:0004.0020: unknown main item tag 0x0
[  210.712539][  T992] hid-generic 0000:0000:0004.0020: unknown main item tag 0x0
[  210.712569][  T992] hid-generic 0000:0000:0004.0020: unknown main item tag 0x0
[  210.808387][  T992] hid-generic 0000:0000:0004.0020: hidraw0: <UNKNOWN> HID v0.03 Device [syz1] on syz0
[  211.651248][ T8380] netlink: 'syz.4.709': attribute type 4 has an invalid length.
[  211.651271][ T8380] netlink: 68 bytes leftover after parsing attributes in process `syz.4.709'.
[  211.675769][ T8376] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  211.839721][ T8376] syzkaller0: entered promiscuous mode
[  211.839769][ T8376] syzkaller0: entered allmulticast mode
[  211.882271][ T8382] tipc: Resetting bearer <eth:syzkaller0>
[  211.916229][ T8375] tipc: Resetting bearer <eth:syzkaller0>
[  211.996509][ T8375] tipc: Disabling bearer <eth:syzkaller0>
[  212.273280][ T8396] openvswitch: netlink: Duplicate or invalid key (type 0).
[  212.273302][ T8396] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  212.539124][   T44] usb 4-1: new high-speed USB device number 29 using dummy_hcd
[  212.582604][ T8412] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  212.582650][ T8412] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  212.691125][   T44] usb 4-1: Using ep0 maxpacket: 8
[  212.692778][   T44] usb 4-1: New USB device found, idVendor=f599, idProduct=34f4, bcdDevice=55.c3
[  212.692817][   T44] usb 4-1: too many configurations: 16, using maximum allowed: 8
[  212.733952][   T44] usb 4-1: unable to read config index 0 descriptor/start: -61
[  212.733990][   T44] usb 4-1: can't read configurations, error -61
[  212.748591][ T8410] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  212.749048][ T8410] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  212.908519][   T44] usb 4-1: new high-speed USB device number 30 using dummy_hcd
[  213.018989][ T5675] usb 1-1: new high-speed USB device number 40 using dummy_hcd
[  213.058612][   T44] usb 4-1: Using ep0 maxpacket: 8
[  213.059359][   T44] usb 4-1: New USB device found, idVendor=f599, idProduct=34f4, bcdDevice=55.c3
[  213.059550][   T44] usb 4-1: too many configurations: 16, using maximum allowed: 8
[  213.061673][   T44] usb 4-1: unable to read config index 0 descriptor/start: -61
[  213.061708][   T44] usb 4-1: can't read configurations, error -61
[  213.062000][   T44] usb usb4-port1: attempt power cycle
[  213.168473][ T5702] usb 5-1: new high-speed USB device number 33 using dummy_hcd
[  213.170018][ T5675] usb 1-1: Using ep0 maxpacket: 8
[  213.171254][ T5675] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[  213.173086][ T5675] usb 1-1: config 0 has an invalid interface number: 31 but max is 0
[  213.173110][ T5675] usb 1-1: config 0 has no interface number 0
[  213.176181][ T5675] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  213.176207][ T5675] usb 1-1: Product: syz
[  213.176245][ T5675] usb 1-1: Manufacturer: syz
[  213.176283][ T5675] usb 1-1: SerialNumber: syz
[  213.181794][ T5675] usb 1-1: config 0 descriptor??
[  213.408503][   T44] usb 4-1: new high-speed USB device number 31 using dummy_hcd
[  213.431807][   T44] usb 4-1: Using ep0 maxpacket: 8
[  213.432509][   T44] usb 4-1: New USB device found, idVendor=f599, idProduct=34f4, bcdDevice=55.c3
[  213.432545][   T44] usb 4-1: too many configurations: 16, using maximum allowed: 8
[  213.435533][   T44] usb 4-1: unable to read config index 0 descriptor/start: -61
[  213.435569][   T44] usb 4-1: can't read configurations, error -61
[  213.558699][   T44] usb 4-1: new high-speed USB device number 32 using dummy_hcd
[  213.575733][ T8420] bridge0: port 2(bridge_slave_1) entered disabled state
[  213.576017][ T8420] bridge0: port 1(bridge_slave_0) entered disabled state
[  213.593987][   T44] usb 4-1: Using ep0 maxpacket: 8
[  213.595459][   T44] usb 4-1: New USB device found, idVendor=f599, idProduct=34f4, bcdDevice=55.c3
[  213.595535][   T44] usb 4-1: too many configurations: 16, using maximum allowed: 8
[  213.621931][   T44] usb 4-1: unable to read config index 0 descriptor/start: -61
[  213.621969][   T44] usb 4-1: can't read configurations, error -61
[  213.622264][   T44] usb usb4-port1: unable to enumerate USB device
[  213.804300][ T8420] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  213.822414][ T8420] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  214.049430][ T3324] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  214.050984][  T148] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  214.051270][  T148] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  214.051546][  T148] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  214.105859][ T5675] uvcvideo 1-1:0.31: Found UVC 0.04 device syz (046d:08c3)
[  214.105952][ T5675] uvcvideo 1-1:0.31: Entity type for entity Output 32774 was not initialized!
[  214.106120][ T5675] uvcvideo 1-1:0.31: Failed to create links for entity 5
[  214.106137][ T5675] uvcvideo 1-1:0.31: Failed to register entities (-22).
[  214.136148][ T5675] usb 1-1: USB disconnect, device number 40
[  214.383231][ T8438] syz.5.730 (8438): drop_caches: 4
[  214.395129][ T8434] ip_tables: iptables: counters copy to user failed while replacing table
[  214.726120][ T8446] bond0: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0)
[  214.848757][ T5615] Bluetooth: hci4: command 0x2016 tx timeout
[  214.867913][ T8451] vimc link validate: Sensor A:src:640x480 (0x42474752, 8, 2, 0, 8) Raw Capture 0:snk:638x480 (0x42474752, 10, 0, 0, 0)
[  215.068151][ T8457] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  215.071330][ T8457] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  215.603028][ T8471] netlink: 20 bytes leftover after parsing attributes in process `syz.0.742'.
[  215.688615][ T5674] usb 4-1: new high-speed USB device number 33 using dummy_hcd
[  215.840793][ T5674] usb 4-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7
[  215.845943][ T5674] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  215.845968][ T5674] usb 4-1: Product: syz
[  215.845982][ T5674] usb 4-1: Manufacturer: syz
[  215.845997][ T5674] usb 4-1: SerialNumber: syz
[  215.886037][ T5674] usb 4-1: config 0 descriptor??
[  216.016153][   T30] kauditd_printk_skb: 175 callbacks suppressed
[  216.016184][   T30] audit: type=1326 audit(1791832501.585:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8474 comm="syz.4.744" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f8719e1d9 code=0x7ffc0000
[  216.016224][   T30] audit: type=1326 audit(1791832501.585:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8474 comm="syz.4.744" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f8719e1d9 code=0x7ffc0000
[  216.016422][   T30] audit: type=1326 audit(1791832501.585:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8474 comm="syz.4.744" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f8719e1d9 code=0x7ffc0000
[  216.016585][   T30] audit: type=1326 audit(1791832501.585:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8474 comm="syz.4.744" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f8719e1d9 code=0x7ffc0000
[  216.016665][   T30] audit: type=1326 audit(1791832501.585:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8474 comm="syz.4.744" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=220 compat=0 ip=0x7f8f8719e1d9 code=0x7ffc0000
[  216.016902][   T30] audit: type=1326 audit(1791832501.585:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8474 comm="syz.4.744" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f8719e1d9 code=0x7ffc0000
[  216.016994][   T30] audit: type=1326 audit(1791832501.585:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8474 comm="syz.4.744" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f8719e1d9 code=0x7ffc0000
[  216.024900][   T30] audit: type=1326 audit(1791832501.595:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8474 comm="syz.4.744" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f8719e1d9 code=0x7ffc0000
[  216.024949][   T30] audit: type=1326 audit(1791832501.595:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8474 comm="syz.4.744" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f8719e1d9 code=0x7ffc0000
[  216.025041][   T30] audit: type=1326 audit(1791832501.595:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8474 comm="syz.4.744" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8f8719e1d9 code=0x7ffc0000
[  216.308508][    T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!!
[  216.579364][ T5701] usb 2-1: new high-speed USB device number 48 using dummy_hcd
[  216.708481][ T5701] usb 2-1: device descriptor read/64, error -71
[  216.786332][  T148] IPVS: starting estimator thread 0...
[  216.868462][ T8495] IPVS: using max 32 ests per chain, 76800 per kthread
[  216.917817][ T5674] usb 4-1: f81604_read: reg: 100f failed: -EPROTO
[  216.928432][ T5615] Bluetooth: hci4: command 0x2016 tx timeout
[  216.948996][ T5701] usb 2-1: new high-speed USB device number 49 using dummy_hcd
[  216.984797][ T5674] usb 4-1: f81604_read: reg: 200f failed: -EPROTO
[  216.998261][ T5674] usb 4-1: USB disconnect, device number 33
[  217.054625][ T5674] usb 4-1: f81604_read: reg: 100f failed: -ENODEV
[  217.079147][ T5701] usb 2-1: device descriptor read/64, error -71
[  217.106710][ T5278] usb 4-1: f81604_read: reg: 200f failed: -ENODEV
[  217.119735][ T5674] usb 4-1: f81604_read: reg: 200f failed: -ENODEV
[  217.189310][ T5701] usb usb2-port1: attempt power cycle
[  217.218491][ T5688] usb 1-1: new high-speed USB device number 41 using dummy_hcd
[  217.368801][ T5688] usb 1-1: Using ep0 maxpacket: 16
[  217.369543][ T5688] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00
[  217.380071][ T5688] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  217.380093][ T5688] usb 1-1: Product: syz
[  217.380117][ T5688] usb 1-1: Manufacturer: syz
[  217.380126][ T5688] usb 1-1: SerialNumber: syz
[  217.382238][ T5688] usb 1-1: config 0 descriptor??
[  217.388199][ T5688] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected
[  217.393275][ T5688] usb 1-1: Detected FT-X
[  217.537098][ T5701] usb 2-1: new high-speed USB device number 50 using dummy_hcd
[  217.553499][ T5701] usb 2-1: device descriptor read/8, error -71
[  217.593010][ T8507] binder: 8506:8507 ioctl c0502100 200000000500 returned -22
[  217.598047][ T8507] binder_alloc: 8506: pid 8506 spamming oneway? 1 buffers allocated for a total size of 4096
[  217.601860][ T8507] binder_alloc: 8506: pid 8506 spamming oneway? 2 buffers allocated for a total size of 5120
[  217.765684][ T8512] program syz.3.757 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  217.789312][ T5701] usb 2-1: new high-speed USB device number 51 using dummy_hcd
[  217.795736][ T8498] netlink: 8 bytes leftover after parsing attributes in process `syz.0.751'.
[  217.811471][ T5701] usb 2-1: device descriptor read/8, error -71
[  217.831464][ T8514] fuse: Bad value for 'fd'
[  217.853260][ T5688] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[  217.853627][ T5688] ftdi_sio 1-1:0.0: GPIO initialisation failed: -71
[  217.855783][ T5688] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  217.891972][ T5688] usb 1-1: USB disconnect, device number 41
[  217.910435][ T5688] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  217.912432][ T5688] ftdi_sio 1-1:0.0: device disconnected
[  217.918732][ T5701] usb usb2-port1: unable to enumerate USB device
[  218.068520][ T5674] usb 4-1: new high-speed USB device number 34 using dummy_hcd
[  218.141367][ T8517] netlink: 'syz.5.759': attribute type 5 has an invalid length.
[  218.223985][ T5674] usb 4-1: Using ep0 maxpacket: 32
[  218.225970][ T5674] usb 4-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7
[  218.227316][ T5674] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  218.239659][ T5674] usb 4-1: config 0 descriptor??
[  218.252629][ T5674] gspca_main: sunplus-2.14.0 probing 041e:400b
[  218.481734][ T8524] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  218.487615][ T8524] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  218.692047][ T8512] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  218.707512][ T8512] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  218.743519][ T5674] gspca_sunplus: reg_w_riv err -71
[  218.743573][ T5674] sunplus 4-1:0.0: probe with driver sunplus failed with error -71
[  218.755508][ T5674] usb 4-1: USB disconnect, device number 34
[  219.518576][ T5709] usb 1-1: new high-speed USB device number 42 using dummy_hcd
[  219.672458][ T5709] usb 1-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00
[  219.673691][ T5709] usb 1-1: config 1 has an invalid interface number: 7 but max is 0
[  219.673715][ T5709] usb 1-1: config 1 has no interface number 0
[  219.673759][ T5709] usb 1-1: config 1 interface 7 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 64
[  219.673776][ T5709] usb 1-1: config 1 interface 7 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7
[  219.688564][ T5674] usb 2-1: new full-speed USB device number 52 using dummy_hcd
[  219.700287][ T5709] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  219.700308][ T5709] usb 1-1: Product: syz
[  219.700316][ T5709] usb 1-1: Manufacturer: syz
[  219.700326][ T5709] usb 1-1: SerialNumber: syz
[  219.758748][   T44] usb 4-1: new high-speed USB device number 35 using dummy_hcd
[  219.780731][ T8536] raw-gadget.5 gadget.0: fail, usb_ep_enable returned -22
[  219.787140][ T5709] usb 1-1: Error in usbnet_get_endpoints (-22)
[  219.840106][ T5674] usb 2-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29
[  219.840995][ T5674] usb 2-1: config 36 has an invalid descriptor of length 0, skipping remainder of the config
[  219.841027][ T5674] usb 2-1: config 36 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  219.842669][ T5674] usb 2-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16
[  219.842685][ T5674] usb 2-1: Manufacturer: syz
[  219.842693][ T5674] usb 2-1: SerialNumber: syz
[  219.918978][   T44] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  219.941245][   T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  219.941273][   T44] usb 4-1: Product: syz
[  219.941287][   T44] usb 4-1: Manufacturer: syz
[  219.941301][   T44] usb 4-1: SerialNumber: syz
[  220.033236][  T992] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  220.305886][ T5701] usb 4-1: USB disconnect, device number 35
[  220.588487][ T5688] usb 5-1: new high-speed USB device number 34 using dummy_hcd
[  220.641844][ T5674] usbhid 2-1:36.0: couldn't find an input interrupt endpoint
[  220.648745][ T5674] usb 2-1: USB disconnect, device number 52
[  220.742368][ T5688] usb 5-1: Using ep0 maxpacket: 16
[  220.744762][ T5688] usb 5-1: New USB device found, idVendor=046d, idProduct=c227, bcdDevice= 0.00
[  220.748558][ T5688] usb 5-1: too many endpoints for config 0 interface 0 altsetting 16: 254, using maximum allowed: 30
[  220.748617][ T5688] usb 5-1: config 0 interface 0 altsetting 16 has 0 endpoint descriptors, different from the interface descriptor's value: 254
[  220.748643][ T5688] usb 5-1: config 0 interface 0 has no altsetting 0
[  220.748674][ T5688] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  220.759410][ T5688] usb 5-1: config 0 descriptor??
[  220.827110][ T5688] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[  221.090855][  T992] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[  221.091025][  T992] ath9k_htc: Failed to initialize the device
[  221.093126][ T5701] usb 4-1: ath9k_htc: USB layer deinitialized
[  221.638557][   T30] kauditd_printk_skb: 203 callbacks suppressed
[  221.638575][   T30] audit: type=1326 audit(1791832507.205:979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8570 comm="syz.1.779" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc62019e1d9 code=0x7ffc0000
[  221.639150][   T30] audit: type=1326 audit(1791832507.215:980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8570 comm="syz.1.779" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc62019e1d9 code=0x7ffc0000
[  221.640226][   T30] audit: type=1326 audit(1791832507.215:981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8570 comm="syz.1.779" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc62019e1d9 code=0x7ffc0000
[  221.646578][   T30] audit: type=1326 audit(1791832507.215:982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8570 comm="syz.1.779" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc62019e1d9 code=0x7ffc0000
[  221.646626][   T30] audit: type=1326 audit(1791832507.215:983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8570 comm="syz.1.779" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fc62019e1d9 code=0x7ffc0000
[  221.646664][   T30] audit: type=1326 audit(1791832507.215:984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8570 comm="syz.1.779" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc62019e1d9 code=0x7ffc0000
[  221.646701][   T30] audit: type=1326 audit(1791832507.215:985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8570 comm="syz.1.779" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc62019e1d9 code=0x7ffc0000
[  221.646745][   T30] audit: type=1326 audit(1791832507.215:986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8570 comm="syz.1.779" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc62015ea0e code=0x7ffc0000
[  221.646784][   T30] audit: type=1326 audit(1791832507.215:987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8570 comm="syz.1.779" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc62019e1d9 code=0x7ffc0000
[  221.646821][   T30] audit: type=1326 audit(1791832507.215:988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8570 comm="syz.1.779" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7fc62019e1d9 code=0x7ffc0000
[  221.795859][ T8578] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  222.000381][ T5701] usb 4-1: new high-speed USB device number 36 using dummy_hcd
[  222.111716][ T8587] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  222.112237][ T8587] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  222.150397][ T5701] usb 4-1: Using ep0 maxpacket: 8
[  222.151097][ T5701] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[  222.152539][ T5701] usb 4-1: config 0 has an invalid interface number: 31 but max is 0
[  222.152563][ T5701] usb 4-1: config 0 has no interface number 0
[  222.154723][ T5701] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  222.154744][ T5701] usb 4-1: Product: syz
[  222.154752][ T5701] usb 4-1: Manufacturer: syz
[  222.154760][ T5701] usb 4-1: SerialNumber: syz
[  222.159804][ T5701] usb 4-1: config 0 descriptor??
[  222.372728][ T5688] usb 1-1: USB disconnect, device number 42
[  222.418639][ T8577] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  222.433375][ T8577] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  222.508902][ T5701] uvcvideo 4-1:0.31: Found UVC 0.04 device syz (046d:08c3)
[  222.508997][ T5701] uvcvideo 4-1:0.31: Entity type for entity Output 32774 was not initialized!
[  222.509136][ T5701] uvcvideo 4-1:0.31: Failed to create links for entity 5
[  222.509153][ T5701] uvcvideo 4-1:0.31: Failed to register entities (-22).
[  222.541606][ T5701] usb 4-1: USB disconnect, device number 36
[  222.782644][ T8595] kvm_intel: kvm [8594]: vcpu1, guest rIP: 0x9114 Unhandled WRMSR(0x1d9) = 0x660b
[  222.784378][ T8595] kvm [8594]: vcpu1, guest rIP: 0x9114 Unhandled WRMSR(0x186) = 0x2a06
[  222.786383][ T8595] kvm [8594]: vcpu1, guest rIP: 0x9114 Unhandled WRMSR(0x11e) = 0x262e
[  223.114357][ T8606] mmap: syz.3.786 (8606) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  223.131450][ T8606] netlink: 20 bytes leftover after parsing attributes in process `syz.3.786'.
[  223.349278][   T44] usb 4-1: new high-speed USB device number 37 using dummy_hcd
[  223.393531][  T992] usb 5-1: USB disconnect, device number 34
[  223.478433][   T44] usb 4-1: device descriptor read/64, error -71
[  223.549697][ T8621] netlink: 32 bytes leftover after parsing attributes in process `syz.4.788'.
[  223.597182][ T8622] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  223.718530][   T44] usb 4-1: new high-speed USB device number 38 using dummy_hcd
[  223.848407][   T44] usb 4-1: device descriptor read/64, error -71
[  223.959102][   T44] usb usb4-port1: attempt power cycle
[  224.112591][  T992] usb 1-1: new high-speed USB device number 43 using dummy_hcd
[  224.270833][  T992] usb 1-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00
[  224.274348][  T992] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  224.274375][  T992] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[  224.303907][   T44] usb 4-1: new high-speed USB device number 39 using dummy_hcd
[  224.326425][   T44] usb 4-1: device descriptor read/8, error -71
[  224.327593][  T992] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  224.327617][  T992] usb 1-1: Product: syz
[  224.327632][  T992] usb 1-1: Manufacturer: syz
[  224.327646][  T992] usb 1-1: SerialNumber: syz
[  224.573238][   T44] usb 4-1: new high-speed USB device number 40 using dummy_hcd
[  224.592785][   T44] usb 4-1: device descriptor read/8, error -71
[  224.700905][   T44] usb usb4-port1: unable to enumerate USB device
[  225.342370][ T8643] netlink: 'syz.0.791': attribute type 2 has an invalid length.
[  225.342397][ T8643] netlink: 'syz.0.791': attribute type 2 has an invalid length.
[  225.366774][ T8643] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  225.377672][ T8643] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  225.598612][  T992] usb 1-1: failed to execute ARPC: -110
[  225.598637][  T992] usb 1-1: failed to set connected state for cport 0: -110
[  225.598655][  T992] greybus greybus1: 0/0:0: failed to set connected state: -110
[  225.659991][ T8642] syzkaller0: entered promiscuous mode
[  225.660018][ T8642] syzkaller0: entered allmulticast mode
[  225.882554][ T5701] hid_parser_main: 91 callbacks suppressed
[  225.882575][ T5701] hid-generic 0000:0000:0004.0021: unknown main item tag 0x0
[  225.882603][ T5701] hid-generic 0000:0000:0004.0021: unknown main item tag 0x0
[  225.882628][ T5701] hid-generic 0000:0000:0004.0021: unknown main item tag 0x0
[  225.882674][ T5701] hid-generic 0000:0000:0004.0021: unknown main item tag 0x0
[  225.882699][ T5701] hid-generic 0000:0000:0004.0021: unknown main item tag 0x0
[  225.882724][ T5701] hid-generic 0000:0000:0004.0021: unknown main item tag 0x0
[  225.882748][ T5701] hid-generic 0000:0000:0004.0021: unknown main item tag 0x0
[  225.882773][ T5701] hid-generic 0000:0000:0004.0021: unknown main item tag 0x0
[  225.882822][ T5701] hid-generic 0000:0000:0004.0021: unknown main item tag 0x0
[  225.882847][ T5701] hid-generic 0000:0000:0004.0021: unknown main item tag 0x0
[  225.913992][ T5701] hid-generic 0000:0000:0004.0021: hidraw0: <UNKNOWN> HID v0.03 Device [syz1] on syz0
[  226.110502][  T992] usb 1-1: failed to send ARPC request 3: -110
[  226.110638][  T992] usb 1-1: failed to execute ARPC: -110
[  226.110654][  T992] usb 1-1: failed to clear cport 0: -110
[  226.110671][  T992] greybus greybus1: 0/0:0: failed to clear host cport: -110
[  226.157461][  T992] es2_ap_driver 1-1:1.0: probe with driver es2_ap_driver failed with error -110
[  226.949000][ T5702] usb 1-1: USB disconnect, device number 43
[  227.759619][ T8676] nvme_fc: nvme_fc_parse_traddr: bad traddr string
[  228.102643][ T8682] vivid-000: disconnect
[  228.104559][ T8680] vivid-000: reconnect
[  228.703388][ T5701] hid-generic 0000:0000:0004.0022: hidraw0: <UNKNOWN> HID v0.03 Device [syz1] on syz0
[  229.708509][ T5701] usb 1-1: new full-speed USB device number 44 using dummy_hcd
[  229.864742][ T5701] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  229.867189][ T5701] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  229.867221][ T5701] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  229.870198][ T5701] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  229.870222][ T5701] usb 1-1: Product: syz
[  229.870235][ T5701] usb 1-1: Manufacturer: syz
[  229.881773][ T5701] hub 1-1:4.0: USB hub found
[  230.087126][ T5701] hub 1-1:4.0: config failed, hub doesn't have any ports! (err -19)
[  230.487799][  T992] hid-generic 0000:0000:0004.0023: hidraw0: <UNKNOWN> HID v0.03 Device [syz1] on syz0
[  230.737390][ T8723] netlink: zone id is out of range
[  230.737406][ T8723] netlink: zone id is out of range
[  230.737414][ T8723] netlink: zone id is out of range
[  230.737422][ T8723] netlink: zone id is out of range
[  230.737430][ T8723] netlink: zone id is out of range
[  230.737437][ T8723] netlink: zone id is out of range
[  230.737712][ T8723] netlink: zone id is out of range
[  230.737722][ T8723] netlink: zone id is out of range
[  230.737731][ T8723] netlink: zone id is out of range
[  230.737738][ T8723] netlink: zone id is out of range
[  230.917855][ T8731] FAULT_INJECTION: forcing a failure.
[  230.917855][ T8731] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  230.917891][ T8731] CPU: 1 UID: 0 PID: 8731 Comm: syz.1.818 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  230.917919][ T8731] Tainted: [L]=SOFTLOCKUP
[  230.917926][ T8731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  230.917938][ T8731] Call Trace:
[  230.917945][ T8731]  <TASK>
[  230.917954][ T8731]  dump_stack_lvl+0xe8/0x150
[  230.917985][ T8731]  should_fail_ex+0x410/0x560
[  230.918017][ T8731]  _copy_to_user+0x31/0xb0
[  230.918045][ T8731]  simple_read_from_buffer+0xe1/0x170
[  230.918078][ T8731]  proc_fail_nth_read+0x1bb/0x230
[  230.918098][ T8731]  ? common_file_perm+0x20e/0x2b0
[  230.918128][ T8731]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  230.918152][ T8731]  ? rw_verify_area+0x24a/0x4c0
[  230.918173][ T8731]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  230.918190][ T8731]  vfs_read+0x213/0xa80
[  230.918214][ T8731]  ? __pfx___mutex_lock+0x10/0x10
[  230.918237][ T8731]  ? __pfx_vfs_read+0x10/0x10
[  230.918263][ T8731]  ? __fget_files+0x2a/0x420
[  230.918286][ T8731]  ? __fget_files+0x3a2/0x420
[  230.918302][ T8731]  ? __fget_files+0x2a/0x420
[  230.918329][ T8731]  ksys_read+0x150/0x270
[  230.918350][ T8731]  ? __pfx_ksys_read+0x10/0x10
[  230.918378][ T8731]  do_syscall_64+0x166/0x520
[  230.918398][ T8731]  ? trace_irq_disable+0x3b/0x140
[  230.918418][ T8731]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  230.918437][ T8731]  ? clear_bhb_loop+0x70/0xc0
[  230.918460][ T8731]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  230.918479][ T8731] RIP: 0033:0x7fc62015ea0e
[  230.918496][ T8731] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  230.918511][ T8731] RSP: 002b:00007fc6210a8fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  230.918533][ T8731] RAX: ffffffffffffffda RBX: 00007fc6210a96c0 RCX: 00007fc62015ea0e
[  230.918546][ T8731] RDX: 000000000000000f RSI: 00007fc6210a90a0 RDI: 0000000000000004
[  230.918559][ T8731] RBP: 00007fc6210a9090 R08: 0000000000000000 R09: 0000000000000000
[  230.918570][ T8731] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  230.918581][ T8731] R13: 00007fc620426038 R14: 00007fc620425fa0 R15: 00007fc62054fa48
[  230.918612][ T8731]  </TASK>
[  230.937344][ T8729] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  230.958988][  T992] usb 1-1: USB disconnect, device number 44
[  231.529612][  T992] usb 4-1: new high-speed USB device number 41 using dummy_hcd
[  231.678434][  T992] usb 4-1: Using ep0 maxpacket: 32
[  231.679301][  T992] usb 4-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64
[  231.680452][  T992] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  231.686204][  T992] usb 4-1: config 0 descriptor??
[  231.730096][  T992] as10x_usb: device has been detected
[  231.731552][  T992] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle)
[  231.766448][  T992] usb 4-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)...
[  231.843114][  T992] as10x_usb: error during firmware upload part1
[  231.843719][  T992] Registered device nBox DVB-T Dongle
[  231.879655][ T8763] --map-set only usable from mangle table
[  231.996719][   T30] kauditd_printk_skb: 9 callbacks suppressed
[  231.996738][   T30] audit: type=1804 audit(1791832517.565:998): pid=8758 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.826" name="/newroot/140/file1" dev="tmpfs" ino=750 res=1 errno=0
[  232.088442][ T5701] usb 4-1: USB disconnect, device number 41
[  232.210428][ T5701] Unregistered device nBox DVB-T Dongle
[  232.222696][ T5701] as10x_usb: device has been disconnected
[  232.414030][ T8767] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  232.467224][ T8775] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized
[  232.549792][ T5688] usb 1-1: new high-speed USB device number 45 using dummy_hcd
[  232.569974][ T8779] netlink: 'syz.5.835': attribute type 1 has an invalid length.
[  232.701425][ T5688] usb 1-1: Using ep0 maxpacket: 32
[  232.702654][ T5688] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  232.709625][ T5688] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  232.709654][ T5688] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  232.716792][ T5688] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  232.716817][ T5688] usb 1-1: Product: syz
[  232.716831][ T5688] usb 1-1: Manufacturer: syz
[  232.758226][ T5688] hub 1-1:4.0: USB hub found
[  233.248799][ T8794] FAULT_INJECTION: forcing a failure.
[  233.248799][ T8794] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  233.248831][ T8794] CPU: 1 UID: 0 PID: 8794 Comm: syz.3.840 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  233.248851][ T8794] Tainted: [L]=SOFTLOCKUP
[  233.248857][ T8794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  233.248865][ T8794] Call Trace:
[  233.248871][ T8794]  <TASK>
[  233.248878][ T8794]  dump_stack_lvl+0xe8/0x150
[  233.248906][ T8794]  should_fail_ex+0x410/0x560
[  233.248930][ T8794]  _copy_from_user+0x2d/0xb0
[  233.248946][ T8794]  generic_map_update_batch+0x6b1/0xae0
[  233.248969][ T8794]  ? __pfx_generic_map_update_batch+0x10/0x10
[  233.248984][ T8794]  ? __fget_files+0x2a/0x420
[  233.249003][ T8794]  ? __pfx_generic_map_update_batch+0x10/0x10
[  233.249017][ T8794]  bpf_map_do_batch+0x391/0x630
[  233.249040][ T8794]  __sys_bpf+0xbe5/0xd90
[  233.249063][ T8794]  ? __pfx___sys_bpf+0x10/0x10
[  233.249088][ T8794]  ? __fget_files+0x2a/0x420
[  233.249112][ T8794]  ? ksys_write+0x242/0x270
[  233.249130][ T8794]  ? __pfx_ksys_write+0x10/0x10
[  233.249148][ T8794]  __x64_sys_bpf+0xba/0xd0
[  233.249166][ T8794]  do_syscall_64+0x166/0x520
[  233.249182][ T8794]  ? trace_irq_disable+0x3b/0x140
[  233.249198][ T8794]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  233.249213][ T8794]  ? clear_bhb_loop+0x70/0xc0
[  233.249231][ T8794]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  233.249246][ T8794] RIP: 0033:0x7f13f919e1d9
[  233.249260][ T8794] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  233.249272][ T8794] RSP: 002b:00007f13f9fd3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  233.249289][ T8794] RAX: ffffffffffffffda RBX: 00007f13f9425fa0 RCX: 00007f13f919e1d9
[  233.249300][ T8794] RDX: 0000000000000038 RSI: 0000200000000100 RDI: 000000000000001a
[  233.249309][ T8794] RBP: 00007f13f9fd3090 R08: 0000000000000000 R09: 0000000000000000
[  233.249319][ T8794] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  233.249328][ T8794] R13: 00007f13f9426038 R14: 00007f13f9425fa0 R15: 00007f13f954fa48
[  233.249353][ T8794]  </TASK>
[  233.643748][ T4934] Bluetooth: hci1: unexpected event for opcode 0x2007
[  233.650327][ T5688] hub 1-1:4.0: config failed, can't read hub descriptor (err -22)
[  233.700630][ T5688] usb 1-1: USB disconnect, device number 45
[  234.203159][ T8801] netlink: 28 bytes leftover after parsing attributes in process `syz.3.842'.
[  234.203185][ T8801] netlink: 28 bytes leftover after parsing attributes in process `syz.3.842'.
[  234.203220][ T8801] netlink: 12 bytes leftover after parsing attributes in process `syz.3.842'.
[  234.576139][ T4934] Bluetooth: hci2: hcon ffff88807f454000 sent 1 < count 6
[  234.576185][ T4934] Bluetooth: hci2: hcon ffff88807f454000 sent 0 < count 3216
[  234.581930][ T4934] Bluetooth: hci2: ACL packet for unknown connection handle 200
[  235.593453][ T8839] use of bytesused == 0 is deprecated and will be removed in the future,
[  235.593465][ T8839] use the actual size instead.
[  235.857859][ T8837] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  235.930658][ T8837] syzkaller0: entered promiscuous mode
[  235.930674][ T8837] syzkaller0: entered allmulticast mode
[  236.023498][ T8837] tipc: Resetting bearer <eth:syzkaller0>
[  236.104104][ T8835] tipc: Resetting bearer <eth:syzkaller0>
[  236.180955][   T30] audit: type=1326 audit(1791832521.755:999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8853 comm="syz.5.857" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd282f9e1d9 code=0x7ffc0000
[  236.182276][   T30] audit: type=1326 audit(1791832521.755:1000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8853 comm="syz.5.857" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd282f9e1d9 code=0x7ffc0000
[  236.183318][   T30] audit: type=1326 audit(1791832521.755:1001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8853 comm="syz.5.857" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fd282f9e1d9 code=0x7ffc0000
[  236.183466][   T30] audit: type=1326 audit(1791832521.755:1002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8853 comm="syz.5.857" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd282f9e1d9 code=0x7ffc0000
[  236.184216][   T30] audit: type=1326 audit(1791832521.755:1003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8853 comm="syz.5.857" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd282f9e1d9 code=0x7ffc0000
[  236.184522][   T30] audit: type=1326 audit(1791832521.755:1004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8853 comm="syz.5.857" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd282f9e1d9 code=0x7ffc0000
[  236.195558][   T30] audit: type=1326 audit(1791832521.765:1005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8853 comm="syz.5.857" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd282f9e1d9 code=0x7ffc0000
[  236.197546][   T30] audit: type=1326 audit(1791832521.765:1006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8853 comm="syz.5.857" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd282f9e1d9 code=0x7ffc0000
[  236.208247][   T30] audit: type=1326 audit(1791832521.775:1007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8853 comm="syz.5.857" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fd282f9e1d9 code=0x7ffc0000
[  236.241053][ T8835] tipc: Disabling bearer <eth:syzkaller0>
[  236.652794][ T8864] xt_LOG: level 64 >= 8
[  236.910218][  T992] hid_parser_main: 293 callbacks suppressed
[  236.910242][  T992] hid-generic 0000:0000:0004.0024: unknown main item tag 0x0
[  236.910272][  T992] hid-generic 0000:0000:0004.0024: unknown main item tag 0x0
[  236.910297][  T992] hid-generic 0000:0000:0004.0024: unknown main item tag 0x0
[  236.910323][  T992] hid-generic 0000:0000:0004.0024: unknown main item tag 0x0
[  236.910348][  T992] hid-generic 0000:0000:0004.0024: unknown main item tag 0x0
[  236.910373][  T992] hid-generic 0000:0000:0004.0024: unknown main item tag 0x0
[  236.910399][  T992] hid-generic 0000:0000:0004.0024: unknown main item tag 0x0
[  236.910424][  T992] hid-generic 0000:0000:0004.0024: unknown main item tag 0x0
[  236.910449][  T992] hid-generic 0000:0000:0004.0024: unknown main item tag 0x0
[  236.910474][  T992] hid-generic 0000:0000:0004.0024: unknown main item tag 0x0
[  237.031888][  T992] hid-generic 0000:0000:0004.0024: hidraw0: <UNKNOWN> HID v0.03 Device [syz1] on syz0
[  237.744495][ T8884] netlink: 'syz.4.863': attribute type 1 has an invalid length.
[  237.857961][ T8884] 8021q: adding VLAN 0 to HW filter on device bond11
[  237.958572][ T5688] usb 4-1: new high-speed USB device number 42 using dummy_hcd
[  238.110265][ T5688] usb 4-1: Using ep0 maxpacket: 8
[  238.113868][ T5688] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[  238.128280][ T5688] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  238.128510][ T5688] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  238.164811][ T5688] usb 4-1: config 0 descriptor??
[  238.203962][ T5688] gspca_main: vc032x-2.14.0 probing 046d:0892
[  239.156694][ T5688] gspca_vc032x: reg_w err -71
[  239.156772][ T5688] vc032x 4-1:0.0: probe with driver vc032x failed with error -71
[  239.167876][ T5688] usb 4-1: USB disconnect, device number 42
[  239.181276][ T8925] netlink: 4 bytes leftover after parsing attributes in process `syz.5.872'.
[  239.279653][ T8928] netlink: 'syz.5.872': attribute type 10 has an invalid length.
[  239.413841][ T8930] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  239.493155][ T8928] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  239.516542][ T8928] bond0: (slave netdevsim1): Enslaving as an active interface with an up link
[  239.533873][   T30] kauditd_printk_skb: 37 callbacks suppressed
[  239.533891][   T30] audit: type=1326 audit(1791832525.105:1045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8934 comm="syz.0.875" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f516ad9e1d9 code=0x0
[  239.754341][ T8943] veth3: entered promiscuous mode
[  239.754365][ T8943] veth3: entered allmulticast mode
[  239.778779][ T8944] FAULT_INJECTION: forcing a failure.
[  239.778779][ T8944] name failslab, interval 1, probability 0, space 0, times 0
[  239.778816][ T8944] CPU: 0 UID: 0 PID: 8944 Comm: syz.4.877 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  239.778848][ T8944] Tainted: [L]=SOFTLOCKUP
[  239.778855][ T8944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  239.778876][ T8944] Call Trace:
[  239.778884][ T8944]  <TASK>
[  239.778892][ T8944]  dump_stack_lvl+0xe8/0x150
[  239.778924][ T8944]  should_fail_ex+0x410/0x560
[  239.778955][ T8944]  should_failslab+0xa8/0x100
[  239.778983][ T8944]  __kmalloc_cache_noprof+0xa3/0x600
[  239.779007][ T8944]  ? __sta_info_destroy_part2+0x283/0x410
[  239.779032][ T8944]  ? __sta_info_destroy_part2+0x283/0x410
[  239.779065][ T8944]  __sta_info_destroy_part2+0x283/0x410
[  239.779096][ T8944]  __sta_info_flush+0x5bb/0x700
[  239.779137][ T8944]  ? __pfx___sta_info_flush+0x10/0x10
[  239.779164][ T8944]  ? queue_delayed_work_on+0x171/0x1e0
[  239.779199][ T8944]  ieee80211_ibss_disconnect+0x316/0x800
[  239.779233][ T8944]  ieee80211_ibss_leave+0x47/0x140
[  239.779256][ T8944]  cfg80211_leave_ibss+0x1d7/0x410
[  239.779297][ T8944]  cfg80211_leave+0x186/0x200
[  239.779323][ T8944]  ? cfg80211_netdev_notifier_call+0x1a6/0x1370
[  239.779348][ T8944]  cfg80211_netdev_notifier_call+0x1b8/0x1370
[  239.779376][ T8944]  ? __pfx_cfg80211_netdev_notifier_call+0x10/0x10
[  239.779409][ T8944]  ? do_raw_spin_lock+0x12b/0x2f0
[  239.779471][ T8944]  ? irqentry_exit+0x218/0x920
[  239.779493][ T8944]  ? lockdep_hardirqs_on+0x7b/0x110
[  239.779514][ T8944]  ? irqentry_exit+0x218/0x920
[  239.779534][ T8944]  ? trace_irq_disable+0x3b/0x140
[  239.779565][ T8944]  ? __lock_acquire+0x747/0x2de0
[  239.779599][ T8944]  ? finish_task_switch+0x413/0xc60
[  239.779645][ T8944]  ? inetdev_event+0x46f/0x15e0
[  239.779687][ T8944]  ? ipmr_device_event+0x1f6/0x220
[  239.779720][ T8944]  notifier_call_chain+0x1a5/0x3d0
[  239.779747][ T8944]  __dev_close_many+0x119/0x6e0
[  239.779776][ T8944]  ? preempt_schedule_thunk+0x16/0x40
[  239.779802][ T8944]  ? __pfx___dev_close_many+0x10/0x10
[  239.779831][ T8944]  ? __dev_change_flags+0x2e2/0x820
[  239.779862][ T8944]  __dev_change_flags+0x3f5/0x820
[  239.779889][ T8944]  ? __pfx___dev_change_flags+0x10/0x10
[  239.779920][ T8944]  netif_change_flags+0x7c/0x1b0
[  239.779945][ T8944]  do_setlink+0xdd6/0x4670
[  239.779965][ T8944]  ? unwind_get_return_address+0x4d/0x90
[  239.780004][ T8944]  ? __pfx_do_setlink+0x10/0x10
[  239.780025][ T8944]  ? __lock_acquire+0x747/0x2de0
[  239.780057][ T8944]  ? kasan_save_track+0x4f/0x80
[  239.780079][ T8944]  ? kasan_save_track+0x3e/0x80
[  239.780100][ T8944]  ? __kasan_kmalloc+0x93/0xb0
[  239.780123][ T8944]  ? __kmalloc_cache_noprof+0x321/0x600
[  239.780156][ T8944]  ? __mutex_trylock_common+0x15f/0x270
[  239.780185][ T8944]  ? __pfx___mutex_trylock_common+0x10/0x10
[  239.780215][ T8944]  ? rcu_is_watching+0x16/0xb0
[  239.780241][ T8944]  ? trace_contention_end+0x3d/0x140
[  239.780269][ T8944]  ? __mutex_lock+0x30b/0x1550
[  239.780304][ T8944]  ? rtnl_newlink+0xc10/0x1c30
[  239.780325][ T8944]  ? __pfx___mutex_lock+0x10/0x10
[  239.780357][ T8944]  ? full_name_hash+0x92/0xe0
[  239.780393][ T8944]  rtnl_newlink+0x15a3/0x1c30
[  239.780432][ T8944]  ? __pfx_rtnl_newlink+0x10/0x10
[  239.780449][ T8944]  ? do_syscall_64+0x166/0x520
[  239.780508][ T8944]  ? kasan_quarantine_put+0xbb/0x1f0
[  239.780531][ T8944]  ? lockdep_hardirqs_on+0x7b/0x110
[  239.780557][ T8944]  ? nlmon_xmit+0xb0/0x100
[  239.780582][ T8944]  ? kmem_cache_free+0x182/0x650
[  239.780618][ T8944]  ? __lock_acquire+0x747/0x2de0
[  239.780648][ T8944]  ? __local_bh_enable_ip+0xd6/0x140
[  239.780674][ T8944]  ? lockdep_hardirqs_on+0x7b/0x110
[  239.780692][ T8944]  ? __dev_queue_xmit+0x29b/0x3920
[  239.780713][ T8944]  ? __local_bh_enable_ip+0xd6/0x140
[  239.780746][ T8944]  ? lock_acquire+0x115/0x350
[  239.780766][ T8944]  ? __pfx_rtnl_newlink+0x10/0x10
[  239.780797][ T8944]  ? __pfx_rtnl_newlink+0x10/0x10
[  239.780815][ T8944]  rtnetlink_rcv_msg+0x802/0xc00
[  239.780839][ T8944]  ? rtnetlink_rcv_msg+0x1c9/0xc00
[  239.780857][ T8944]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  239.780884][ T8944]  ? ref_tracker_free+0x689/0x830
[  239.780916][ T8944]  ? __pfx_ref_tracker_free+0x10/0x10
[  239.780943][ T8944]  ? __asan_memcpy+0x40/0x70
[  239.780963][ T8944]  ? __skb_clone+0x5c/0x6c0
[  239.780990][ T8944]  netlink_rcv_skb+0x226/0x4a0
[  239.781016][ T8944]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  239.781048][ T8944]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  239.781086][ T8944]  ? netlink_deliver_tap+0x2e/0x1b0
[  239.781109][ T8944]  ? netlink_deliver_tap+0x2e/0x1b0
[  239.781138][ T8944]  netlink_unicast+0x7bd/0x940
[  239.781170][ T8944]  netlink_sendmsg+0x813/0xb40
[  239.781204][ T8944]  ? __pfx_netlink_sendmsg+0x10/0x10
[  239.781237][ T8944]  ? apparmor_socket_sendmsg+0x98/0x360
[  239.781266][ T8944]  ? __pfx_netlink_sendmsg+0x10/0x10
[  239.781290][ T8944]  sock_sendmsg_nosec+0x13a/0x180
[  239.781319][ T8944]  ____sys_sendmsg+0x54e/0x850
[  239.781347][ T8944]  ? __pfx_____sys_sendmsg+0x10/0x10
[  239.781377][ T8944]  ? import_iovec+0x73/0xa0
[  239.781410][ T8944]  ___sys_sendmsg+0x2a5/0x360
[  239.781436][ T8944]  ? __lock_acquire+0x747/0x2de0
[  239.781462][ T8944]  ? __pfx____sys_sendmsg+0x10/0x10
[  239.781521][ T8944]  ? __fget_files+0x2a/0x420
[  239.781539][ T8944]  ? __fget_files+0x3a2/0x420
[  239.781568][ T8944]  __x64_sys_sendmsg+0x1b1/0x290
[  239.781593][ T8944]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  239.781637][ T8944]  do_syscall_64+0x166/0x520
[  239.781659][ T8944]  ? trace_irq_disable+0x3b/0x140
[  239.781680][ T8944]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  239.781700][ T8944]  ? clear_bhb_loop+0x70/0xc0
[  239.781726][ T8944]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  239.781745][ T8944] RIP: 0033:0x7f8f8719e1d9
[  239.781764][ T8944] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  239.781782][ T8944] RSP: 002b:00007f8f853f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  239.781803][ T8944] RAX: ffffffffffffffda RBX: 00007f8f87425fa0 RCX: 00007f8f8719e1d9
[  239.781818][ T8944] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000007
[  239.781831][ T8944] RBP: 00007f8f853f6090 R08: 0000000000000000 R09: 0000000000000000
[  239.781843][ T8944] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  239.781856][ T8944] R13: 00007f8f87426038 R14: 00007f8f87425fa0 R15: 00007f8f8754fa48
[  239.781889][ T8944]  </TASK>
[  239.964818][ T8944] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode
[  239.965940][    C1] ------------[ cut here ]------------
[  239.965953][    C1] !local->started
[  239.965965][    C1] WARNING: net/mac80211/rx.c:5601 at ieee80211_rx_list+0x2bd9/0x3b00, CPU#1: pr/ttyS0/16
[  240.137003][ T8948] netlink: 8 bytes leftover after parsing attributes in process `syz.5.879'.
[  240.137024][ T8948] netlink: 24 bytes leftover after parsing attributes in process `syz.5.879'.
[  240.225252][ T8949] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  240.460525][ T8956] netlink: 112 bytes leftover after parsing attributes in process `syz.4.882'.
[  240.481960][    C1] Modules linked in:
[  240.485878][    C1] CPU: 1 UID: 0 PID: 16 Comm: pr/ttyS0 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  240.497205][    C1] Tainted: [L]=SOFTLOCKUP
[  240.501570][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  240.511658][    C1] RIP: 0010:ieee80211_rx_list+0x2bd9/0x3b00
[  240.517573][    C1] Code: 90 e9 84 e9 ff ff e8 f6 ce 68 f6 e9 7a e9 ff ff e8 ec ce 68 f6 e9 70 e9 ff ff e8 e2 ce 68 f6 e9 66 e9 ff ff e8 d8 ce 68 f6 90 <0f> 0b 90 e9 58 e9 ff ff e8 ca ce 68 f6 48 c7 44 24 50 00 00 00 00
[  240.537334][    C1] RSP: 0018:ffffc90000a18b40 EFLAGS: 00010246
[  240.543449][    C1] RAX: ffffffff8b5f4198 RBX: ffff888053f0175d RCX: ffff88801f298000
[  240.551488][    C1] RDX: 8000000000000100 RSI: 0000000000000100 RDI: 0000000000000005
[  240.559499][    C1] RBP: ffffc90000a18db0 R08: 0000000000000100 R09: 0000000000000000
[  240.567484][    C1] R10: 0000000000000002 R11: 8000000000000100 R12: dffffc0000000000
[  240.575508][    C1] R13: ffff888074769640 R14: ffff888053f032a8 R15: ffff888053f00fa0
[  240.583519][    C1] FS:  0000000000000000(0000) GS:ffff888123bbf000(0000) knlGS:0000000000000000
[  240.592496][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  240.599113][    C1] CR2: 0000001b31a0eff8 CR3: 00000000771b2000 CR4: 00000000003526f0
[  240.607106][    C1] Call Trace:
[  240.610431][    C1]  <IRQ>
[  240.613308][    C1]  ? __pfx_ieee80211_rx_list+0x10/0x10
[  240.618821][    C1]  ? __lock_acquire+0x747/0x2de0
[  240.619096][ T5701] hid-generic 0000:0000:0004.0025: hidraw0: <UNKNOWN> HID v0.03 Device [syz1] on syz0
[  240.633345][    C1]  ? lock_acquire+0x115/0x350
[  240.638053][    C1]  ? do_raw_spin_lock+0x12b/0x2f0
[  240.643149][    C1]  ? ieee80211_rx_napi+0xd1/0x3d0
[  240.648193][    C1]  ieee80211_rx_napi+0x1ad/0x3d0
[  240.653191][    C1]  ? __pfx_ieee80211_rx_napi+0x10/0x10
[  240.659028][    C1]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  240.664874][    C1]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  240.670730][    C1]  ? skb_dequeue+0x124/0x160
[  240.675350][    C1]  ieee80211_handle_queued_frames+0xe4/0x1d0
[  240.681467][    C1]  tasklet_action_common+0x2d7/0x490
[  240.686792][    C1]  handle_softirqs+0x226/0x860
[  240.691631][    C1]  ? __irq_exit_rcu+0xcb/0x220
[  240.696432][    C1]  __irq_exit_rcu+0xcb/0x220
[  240.701087][    C1]  irq_exit_rcu+0x9/0x30
[  240.705355][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  240.711041][    C1]  </IRQ>
[  240.713978][    C1]  <TASK>
[  240.716914][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  240.722957][    C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x47/0x80
[  240.729412][    C1] Code: f7 e8 7d a0 b8 f5 f7 c3 00 02 00 00 74 05 e8 70 ef e4 f5 9c 58 a9 00 02 00 00 75 29 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 <e8> b4 9d a9 f5 65 48 8b 05 0c a0 aa 08 48 85 c0 74 18 5b 41 5e e9
[  240.749080][    C1] RSP: 0018:ffffc90000157ca8 EFLAGS: 00000206
[  240.755172][    C1] RAX: 0000000000000002 RBX: 0000000000000206 RCX: 8000000000000001
[  240.763203][    C1] RDX: 0000000000000000 RSI: ffffffff8e46978f RDI: 0000000000000001
[  240.771214][    C1] RBP: ffffc90000157e18 R08: ffffffff917a727f R09: 1ffffffff22f4e4f
[  240.779239][    C1] R10: dffffc0000000000 R11: fffffbfff22f4e50 R12: 0000000000000002
[  240.787224][    C1] R13: ffff88801f298000 R14: ffffffff9bd4be20 R15: dffffc0000000000
[  240.795316][    C1]  nbcon_kthread_func+0x6c4/0x880
[  240.800412][    C1]  ? nbcon_kthread_func+0x163/0x880
[  240.805632][    C1]  ? __pfx_nbcon_kthread_func+0x10/0x10
[  240.811260][    C1]  ? __kthread_parkme+0x71/0x1f0
[  240.816233][    C1]  ? __kthread_parkme+0x199/0x1f0
[  240.821341][    C1]  kthread+0x38b/0x480
[  240.825446][    C1]  ? __pfx_nbcon_kthread_func+0x10/0x10
[  240.831048][    C1]  ? __pfx_kthread+0x10/0x10
[  240.835659][    C1]  ret_from_fork+0x514/0xb70
[  240.840324][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  240.845453][    C1]  ? __switch_to+0xc89/0x1420
[  240.850206][    C1]  ? __pfx_kthread+0x10/0x10
[  240.854813][    C1]  ret_from_fork_asm+0x1a/0x30
[  240.859655][    C1]  </TASK>
[  240.862700][    C1] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  240.869985][    C1] CPU: 1 UID: 0 PID: 16 Comm: pr/ttyS0 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  240.880495][    C1] Tainted: [L]=SOFTLOCKUP
[  240.884824][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  240.894887][    C1] Call Trace:
[  240.898173][    C1]  <IRQ>
[  240.901026][    C1]  vpanic+0x56d/0xa60
[  240.905029][    C1]  ? __pfx__printk+0x10/0x10
[  240.909635][    C1]  ? __pfx_vpanic+0x10/0x10
[  240.914158][    C1]  ? is_bpf_text_address+0x292/0x2b0
[  240.919464][    C1]  ? is_bpf_text_address+0x26/0x2b0
[  240.924690][    C1]  panic+0xc5/0xd0
[  240.928431][    C1]  ? __pfx_panic+0x10/0x10
[  240.932873][    C1]  ? ret_from_fork_asm+0x1a/0x30
[  240.937822][    C1]  __warn+0x315/0x4c0
[  240.941817][    C1]  ? ieee80211_rx_list+0x2bd9/0x3b00
[  240.947118][    C1]  ? ieee80211_rx_list+0x2bd9/0x3b00
[  240.952532][    C1]  __report_bug+0x276/0x570
[  240.957045][    C1]  ? ieee80211_rx_list+0x2bd9/0x3b00
[  240.962343][    C1]  ? __pfx___report_bug+0x10/0x10
[  240.967401][    C1]  ? ieee80211_rx_list+0x2bd9/0x3b00
[  240.972700][    C1]  report_bug+0x16b/0x220
[  240.977045][    C1]  ? ieee80211_rx_list+0x2bd9/0x3b00
[  240.982349][    C1]  ? ieee80211_rx_list+0x2bdb/0x3b00
[  240.987644][    C1]  handle_bug+0x9c/0x200
[  240.991887][    C1]  exc_invalid_op+0x1a/0x50
[  240.996397][    C1]  asm_exc_invalid_op+0x1a/0x20
[  241.001257][    C1] RIP: 0010:ieee80211_rx_list+0x2bd9/0x3b00
[  241.007157][    C1] Code: 90 e9 84 e9 ff ff e8 f6 ce 68 f6 e9 7a e9 ff ff e8 ec ce 68 f6 e9 70 e9 ff ff e8 e2 ce 68 f6 e9 66 e9 ff ff e8 d8 ce 68 f6 90 <0f> 0b 90 e9 58 e9 ff ff e8 ca ce 68 f6 48 c7 44 24 50 00 00 00 00
[  241.026769][    C1] RSP: 0018:ffffc90000a18b40 EFLAGS: 00010246
[  241.032841][    C1] RAX: ffffffff8b5f4198 RBX: ffff888053f0175d RCX: ffff88801f298000
[  241.040814][    C1] RDX: 8000000000000100 RSI: 0000000000000100 RDI: 0000000000000005
[  241.048780][    C1] RBP: ffffc90000a18db0 R08: 0000000000000100 R09: 0000000000000000
[  241.056757][    C1] R10: 0000000000000002 R11: 8000000000000100 R12: dffffc0000000000
[  241.064724][    C1] R13: ffff888074769640 R14: ffff888053f032a8 R15: ffff888053f00fa0
[  241.072700][    C1]  ? ieee80211_rx_list+0x2bd8/0x3b00
[  241.078007][    C1]  ? __pfx_ieee80211_rx_list+0x10/0x10
[  241.083465][    C1]  ? __lock_acquire+0x747/0x2de0
[  241.088420][    C1]  ? lock_acquire+0x115/0x350
[  241.093111][    C1]  ? do_raw_spin_lock+0x12b/0x2f0
[  241.098149][    C1]  ? ieee80211_rx_napi+0xd1/0x3d0
[  241.103171][    C1]  ieee80211_rx_napi+0x1ad/0x3d0
[  241.108113][    C1]  ? __pfx_ieee80211_rx_napi+0x10/0x10
[  241.113572][    C1]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  241.119487][    C1]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  241.125308][    C1]  ? skb_dequeue+0x124/0x160
[  241.129899][    C1]  ieee80211_handle_queued_frames+0xe4/0x1d0
[  241.135890][    C1]  tasklet_action_common+0x2d7/0x490
[  241.141193][    C1]  handle_softirqs+0x226/0x860
[  241.145971][    C1]  ? __irq_exit_rcu+0xcb/0x220
[  241.150750][    C1]  __irq_exit_rcu+0xcb/0x220
[  241.155470][    C1]  irq_exit_rcu+0x9/0x30
[  241.159725][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  241.165368][    C1]  </IRQ>
[  241.168298][    C1]  <TASK>
[  241.171227][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  241.177207][    C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x47/0x80
[  241.183621][    C1] Code: f7 e8 7d a0 b8 f5 f7 c3 00 02 00 00 74 05 e8 70 ef e4 f5 9c 58 a9 00 02 00 00 75 29 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 <e8> b4 9d a9 f5 65 48 8b 05 0c a0 aa 08 48 85 c0 74 18 5b 41 5e e9
[  241.203228][    C1] RSP: 0018:ffffc90000157ca8 EFLAGS: 00000206
[  241.209316][    C1] RAX: 0000000000000002 RBX: 0000000000000206 RCX: 8000000000000001
[  241.217300][    C1] RDX: 0000000000000000 RSI: ffffffff8e46978f RDI: 0000000000000001
[  241.225281][    C1] RBP: ffffc90000157e18 R08: ffffffff917a727f R09: 1ffffffff22f4e4f
[  241.233254][    C1] R10: dffffc0000000000 R11: fffffbfff22f4e50 R12: 0000000000000002
[  241.241226][    C1] R13: ffff88801f298000 R14: ffffffff9bd4be20 R15: dffffc0000000000
[  241.249215][    C1]  nbcon_kthread_func+0x6c4/0x880
[  241.254262][    C1]  ? nbcon_kthread_func+0x163/0x880
[  241.259465][    C1]  ? __pfx_nbcon_kthread_func+0x10/0x10
[  241.265013][    C1]  ? __kthread_parkme+0x71/0x1f0
[  241.269954][    C1]  ? __kthread_parkme+0x199/0x1f0
[  241.274990][    C1]  kthread+0x38b/0x480
[  241.279060][    C1]  ? __pfx_nbcon_kthread_func+0x10/0x10
[  241.284616][    C1]  ? __pfx_kthread+0x10/0x10
[  241.289204][    C1]  ret_from_fork+0x514/0xb70
[  241.293791][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  241.298906][    C1]  ? __switch_to+0xc89/0x1420
[  241.303589][    C1]  ? __pfx_kthread+0x10/0x10
[  241.308173][    C1]  ret_from_fork_asm+0x1a/0x30
[  241.312946][    C1]  </TASK>
[  241.316240][    C1] Kernel Offset: disabled
[  241.320556][    C1] Rebooting in 86400 seconds..